autonomous-loops
v1.0.1Autonomous Claude Code loop patterns: sequential pipelines, persistent REPL sessions, parallel spec-driven generation, PR automation, cleanup passes, and RFC...
⭐ 0· 0·0 current·0 all-time
byDeonte Cooper@djc00p
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (autonomous loops, pipelines, PR automation, DAG orchestration) aligns with the declared requirements: gh/git for repository and PR operations, node for the persistent REPL script examples, and CLAW_SESSION/CLAW_SKILLS to select session context/skill sets. Nothing requested appears unrelated to the described automation patterns.
Instruction Scope
SKILL.md instructs the agent to read/write session files (~/.claude/sessions/{name}.md), create/update SHARED_TASK_NOTES.md, run claude -p, run git/gh commands (create branches, push, create and merge PRs), and poll CI logs. These actions are within the skill's scope but are powerful: they will read local repo files, modify code, commit/push, and can auto-fix and auto-merge PRs if enabled. The doc correctly advises limits, but users should be aware these instructions grant the agent effective control over repo changes when invoked.
Install Mechanism
No install spec and no code files are present; this is instruction-only. That lowers supply-chain risk because nothing is downloaded or written by an installer. The skill relies on existing binaries on PATH (gh, git, node).
Credentials
Only CLAW_SESSION and CLAW_SKILLS are required (plus gh/git/node binaries). Those env vars map to session selection and skill composition and make sense for persistent REPL and pattern selection. The skill does not request unrelated credentials (no cloud keys, tokens, or passwords). Note: using gh implies the user will have gh auth configured — that grants repository privileges, so treat gh credentials carefully.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent forced inclusion. The instructions describe persisting session and task files and automating PR lifecycle, which is expected behavior for this class of skill. Because autonomous invocation is allowed, the usual caution applies: if the agent is allowed to run these loops unattended, it may create/merge PRs and spend tokens/costs unless caps are set.
Scan Findings in Context
[no-regex-findings] expected: The repository is instruction-only and the regex scanner had no code to analyze. That's expected; absence of findings does not imply absence of risk because the instructions themselves trigger powerful local operations (git/gh/claude invocations).
Assessment
This skill is coherent with its stated goal (automating Claude-driven pipelines), but it enables high-impact actions: creating branches, committing, pushing, opening and merging PRs, and auto-fixing CI failures. Before using it: 1) test in a sandbox repository and enable --disable-commits or dry-run modes; 2) set conservative caps (max-runs, max-cost, max-duration) and require manual approval before merges; 3) ensure your gh CLI is scoped to only the repos you intend (use a token with minimal scopes or a machine/service account); 4) review and control any session files (~/.claude/sessions) for sensitive data before allowing automation to read them; 5) prefer human review gates for critical repos; and 6) audit any scripts you run that they don't pipe remote content directly to bash. If you want tighter safety, require human-in-the-loop checks before merge or disable autonomous invocation for this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk971g5t00mdagfny1nq9jjq38584acec
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔄 Clawdis
OSLinux · macOS · Windows
Binsgh, git, node
EnvCLAW_SESSION, CLAW_SKILLS
