ClawHub

3Q-quality-system

v4.0.1

提供基于13问三层结构与自动触发的元认知质量保障，支持文档、代码、决策等多场景质量检查与管控。

⭐ 0· 109·0 current·0 all-time
byQE@qh582
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description claim a meta-cognitive 3Q quality system and the package is entirely composed of SKILL.md manuals that implement that framework. Required resources (none) and declared behavior (copy skill files into the OpenClaw workspace, update HEARTBEAT.md, create quality-metrics.json) align with a workspace-integrated quality skillset.
ℹ
Instruction Scope
Runtime instructions are purely prose and shell snippets telling the user/agent to copy skill folders into ~/.openclaw/workspace-main/skills/, append a QualityOS section to HEARTBEAT.md, and create ~/.openclaw/workspace-main/quality-metrics.json. These are within the expected scope for a workspace-integrated skill but do modify local workspace files; the manual does include a backup recommendation. Small inconsistencies: quickstart in package.json mentions 'npx clawhub ...' and './install.sh' which are not provided in the archive, and package.json version (4.0.0) differs from registry SKILL.md version (v4.0.1) — these are operational/documentation mismatches (not harmful) that you may want to clarify.
✓
Install Mechanism
This is instruction-only and has no automated install spec or archive downloads. The highest-risk install pattern (downloading and extracting remote archives) is not present. Manual-install instructions operate on local files and standard shell tools (cp, cat, grep).
✓
Credentials
The skill requests no environment variables, no credentials, and no binaries. The only resource access advised is to the user's OpenClaw workspace (~/.openclaw/workspace-main) which is proportionate for a workspace-integrated quality-skill bundle.
ℹ
Persistence & Privilege
The install instructions append configuration to ~/.openclaw/workspace-main/HEARTBEAT.md and create ~/.openclaw/workspace-main/quality-metrics.json and copy skills into the workspace. This is expected for a skill that registers triggers and integrates with an operating workspace; it does not request always:true nor attempt to modify other skills' configs. As with any package that writes to your workspace, review the exact appended content before applying it.
Assessment
This package is an instruction-only quality-framework and appears internally consistent with that purpose. Before installing: (1) Back up ~/.openclaw/workspace-main/HEARTBEAT.md (the manual suggests this). (2) Inspect the files you will copy (the SKILL.md files) and the exact snippet the manual will append to HEARTBEAT.md so you know what behavior is being registered. (3) Note the minor documentation inconsistencies: package.json mentions an npx install and an install.sh that are not included, and version numbers differ slightly — ask the maintainer or verify the GitHub repo if you fetched this remotely. (4) If you do not trust the source, do not run remote npx/install scripts; prefer manual inspection and manual copy. Finally, remember that skills can be invoked by the agent by default — this package does not request extra credentials, but if you enable automatic triggers (file save, commits) be sure you understand when checks will run and what data (your documents) will be processed.

Like a lobster shell, security has layers — review code before you run it.

latestvk972n3yggsfgasnskz0t0f3qvs83z6ps

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments