Type-Based Autonomy

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent for type-filtered autonomous task work, but users should understand it can keep working from a local queue and persist notes if they enable the heartbeat workflow.

Before installing, decide whether you really want heartbeat-style autonomous work. Edit the RA/MONEY goal text to your own goals, confirm cron or another system handles skipped backup/security/maintenance tasks, and keep the queue and memory files under review or version control.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If integrated into a heartbeat process, the agent may spend tokens and make progress on queued tasks without a fresh prompt for each task.

Why it was flagged

The heartbeat protocol allows the agent to continue selecting and performing queued tasks. This is the skill's disclosed purpose, but it is autonomous behavior users should intentionally enable.

Skill content
Task complete and time remaining? → Pick another allowed-type task if queue has one
Recommendation

Enable the heartbeat only when desired, keep the queue reviewed, and use the provided token/time limits.

What this means

Persistent notes may preserve goals, preferences, file states, and resume instructions across sessions.

Why it was flagged

The skill tells future sessions to rely on persisted checkpoint content. This supports recovery, but stale or tampered memory files could steer later agent behavior.

Skill content
Checkpoints include "Resume Instructions" — follow them exactly
Recommendation

Store these memory files only in trusted workspaces, review them periodically, and avoid placing secrets or untrusted instructions in them.

What this means

If left unchanged, the agent may bias task selection and follow-up work toward an RA/MONEY objective rather than the user's own goals.

Why it was flagged

The template contains a specific hard-coded goal and identity reference. It is visible, but may not match every user's intended objective.

Skill content
Every task should link to RA's long-term goal: **MONEY**
Recommendation

Edit GOALS.md and the queue template to reflect the actual user's goals before enabling autonomous work.

What this means

If no separate cron process is actually configured, skipped maintenance, backup, or security tasks may not run.

Why it was flagged

The autonomy workflow deliberately skips maintenance, backup, and security tasks because it assumes separate cron jobs handle them.

Skill content
Maintenance (`@type:maintenance`) - Cron handles cleanup, backup ... Security (`@type:security`) - Monthly audit by cron
Recommendation

Confirm the separate cron jobs exist, or change the queue policy so important operational tasks are handled elsewhere.

What this means

Users cannot verify the exact upstream commit from the supplied metadata.

Why it was flagged

The provenance link is a placeholder, and the registry source is unknown. Because there is no code or install script, this is a low-impact provenance note rather than a behavior concern.

Skill content
"commit": "https://github.com/openclaw/skills/commit/placeholder"
Recommendation

Prefer a version with a real source link or review the included instruction files before use.