Dolores 运维工具

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: dolores-ops Version: 1.1.0 The 'dolores-ops' skill bundle is designed for routine maintenance of the OpenClaw agent, including health checks, log management, and memory synchronization. While it requests high-privilege tools like 'exec' and 'write' to manage system logs and cron jobs via the 'openclaw' CLI, the instructions in SKILL.md include explicit safety rules, such as requiring user confirmation before deleting files and protecting critical directories (e.g., .git, memory, skills). There is no evidence of data exfiltration, unauthorized remote execution, or malicious intent.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Important details from conversations, such as preferences, decisions, or commitments, may be saved and reused later.

Why it was flagged

The skill explicitly reads conversation history and writes selected information into persistent memory files.

Skill content
回顾当天对话记录(`sessions_history`)... 提取重要事项写入 `memory/YYYY-MM-DD.md` ... 判断是否有值得沉淀到 `MEMORY.md` 的内容
Recommendation

Only use memory sync if you want this persistence; review memory files periodically and avoid saving sensitive or temporary information.

What this means

The agent may start local services, inspect logs, write files, or clean old logs as part of maintenance.

Why it was flagged

The skill can execute local OpenClaw commands and modify or remove maintenance-related files, which is expected for an operations helper.

Skill content
allowed-tools: [exec, read, write, edit, sessions_list] ... Gateway 不运行 → 执行 `openclaw gateway start` ... 清理超过 30 天的旧日志
Recommendation

Review command output and cleanup plans before allowing changes, especially when deleting files or changing service state.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If you enable the heartbeat or cron examples, the maintenance tasks may run repeatedly without a fresh manual prompt each time.

Why it was flagged

The skill documents scheduled daily/weekly maintenance via cron or heartbeat, creating recurring agent activity when configured.

Skill content
触发:每天 8:00 (via cron) 或 heartbeat ... 触发:每天 21:00 (via heartbeat) ... 在 `HEARTBEAT.md` 中添加
Recommendation

Enable scheduled tasks only if you want recurring self-maintenance, and keep the schedule visible and easy to disable.