Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Dreaming Guard Pro

v1.0.0

Smart prevention and auto-recovery for OpenClaw dreaming context overflow. Monitors growth trends, archives intelligently, compresses context, protects proce...

0· 97·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kuangzhanzhiwang/dreaming-guard-pro.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Dreaming Guard Pro" (kuangzhanzhiwang/dreaming-guard-pro) from ClawHub.
Skill page: https://clawhub.ai/kuangzhanzhiwang/dreaming-guard-pro
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install dreaming-guard-pro

ClawHub CLI

Package manager switcher

npx clawhub@latest install dreaming-guard-pro
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the included modules (monitor, analyzer, archiver, compressor, protector, healer). The code implements filesystem scanning, compression, backups and reporting which are reasonable for the stated goal. However there are minor mismatches in documentation (README/ARCHITECTURE reference npm dependencies that the shipped code doesn't use) and the cron script hardcodes a /root project path which is unexpected for a general-purpose OpenClaw skill.
!
Instruction Scope
SKILL.md instructs copying files from /root and running cron entries that reference /path/to/dreaming-guard-pro; the provided cron runner script (scripts/dreaming-guard-pro.sh) uses PROJECT_DIR="/root/.openclaw/workspace/projects/dreaming-guard-pro" which will fail for non-root installs and suggests the package assumes root layout. SKILL.md also references test/test-phase5.js (and some other artifacts) that are not present in the manifest. The runtime instructions cause the agent to start modules that will read and write files under ~/.openclaw and may start/stop monitoring/protector/healer components; any module that intervenes on processes (restart, emergency actions) should be audited before running.
Install Mechanism
There is no formal install spec (instruction-only), but the repository includes JavaScript files that will be copied into the agent environment and executed. No remote downloads or package registry installs are requested, which reduces supply-chain risk; however executing bundled Node code still runs arbitrary code on the host.
Credentials
The skill does not require credentials and only documents non-sensitive environment variables for thresholds and paths. ENV mappings are configuration/threshold values, not secrets — this is proportionate to the described functionality.
Persistence & Privilege
always:false and model invocation remains allowed (default). The skill writes config, state, archives, backups under ~/.openclaw and may be run from cron; these are expected for a daemon-style guard. However the cron script's hardcoded root path and the architecture's emergency action ('restart' of gateway) indicate the skill can affect other processes — review protector/healer implementations and cron usage before giving it persistent runtime.
What to consider before installing
This package appears to implement the advertised monitoring, archiving and compression features, but there are several red flags you should check before installing: - Inspect protector.js and healer.js to confirm what "intervene"/"restart" actions do (can they kill/restart other processes? do they require sudo?). If they restart system processes you must ensure that behavior is acceptable. - Fix the cron/installation instructions: scripts/dreaming-guard-pro.sh hardcodes PROJECT_DIR under /root which will likely be wrong for your environment; adjust paths before enabling a cron job. - SKILL.md mentions test/test-phase5.js but that file is missing from the manifest — run the included tests (node test/run-tests.js and the listed test files) locally to confirm behavior. - The README/ARCHITECTURE text contains minor inconsistencies (license badge vs package.json license, different repo URLs, mention of external npm deps that aren't used). These are signs of sloppy packaging, not necessarily malicious intent, but they warrant extra caution. - Run the skill in a sandbox or non-production environment first; review or run the code with a debugger to observe filesystem and process actions. Confirm backup/restore paths (they default to ~/.openclaw/*) and ensure you have backups of important data. If you are not comfortable auditing the protector/healer modules yourself, do not install it with persistent/crontab execution. If you proceed, limit its permissions (run as an unprivileged user or inside a container) and verify behavior with dryRun options where available.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🛡️ Clawdis
latestvk97dtc95hr9pdqma3yv1nwer5h85446j
97downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Dreaming Guard Pro

防止OpenClaw dreaming文件无限积累导致OOM崩溃的智能保护系统

触发词

  • dreaming
  • context overflow
  • OOM
  • crash recovery
  • memory protection
  • dreaming guard
  • 健康报告

功能描述

Dreaming Guard Pro 是一个智能保护系统,用于:

  1. 实时监控 - 监控dreaming文件增长趋势和内存使用
  2. 智能归档 - 三级归档策略(hot/warm/cold),保留有价值数据
  3. 自动压缩 - 三级压缩策略(lossless/lossy/aggressive),减少空间占用
  4. 进程保护 - 内存阈值分级保护,危险时主动干预
  5. 崩溃自愈 - 自动检测崩溃并恢复到最近健康状态
  6. 健康报告 - 定期生成可视化状态报告

安装

作为ClawHub Skill安装

cd ~/.openclaw/skills
mkdir dreaming-guard
cp -r /root/.openclaw/workspace/projects/dreaming-guard-pro/* dreaming-guard/

手动安装

cd projects/dreaming-guard-pro
npm install  # 无需外部依赖,纯Node.js实现

使用方式

作为Skill使用

在对话中使用触发词即可激活:

用户: 检查dreaming状态
助手: [调用Dreaming Guard Pro生成健康报告]

作为模块使用

const Guard = require('dreaming-guard-pro/src/guard');

// 创建并启动守护进程
const guard = new Guard({
  loopInterval: 30000,      // 30秒检查一次
  reportInterval: 3600000,  // 1小时生成报告
  enableProtector: true,    // 启用进程保护
  enableHealer: true        // 启用崩溃自愈
});

await guard.start();

// 获取当前状态
const status = guard.getStatus();

// 手动触发动作
await guard.triggerArchive();
await guard.triggerCompress('lossy');

// 生成健康报告
const report = guard.getHealthReport('markdown');

// 停止守护
await guard.stop();

独立模块使用

// 只使用监控器
const Monitor = require('dreaming-guard-pro/src/monitor');
const monitor = new Monitor({ interval: 30000 });
await monitor.start();

// 只使用压缩器
const Compressor = require('dreaming-guard-pro/src/compressor');
const compressor = new Compressor();
await compressor.compress('/path/to/dreams', 'lossy');

// 只使用归档器
const Archiver = require('dreaming-guard-pro/src/archiver');
const archiver = new Archiver();
await archiver.archive({ sourcePath: '/path/to/dreams' });

配置选项

主配置 (Guard)

选项默认值说明
loopInterval30000主循环间隔(毫秒)
reportInterval3600000报告生成间隔(毫秒)
enableProtectortrue启用进程保护
enableHealertrue启用崩溃自愈
enableReportertrue启用报告生成
watchPath~/.openclaw/workspace/memory/.dreams监控路径
logLevel'info'日志级别

分析器配置 (Analyzer)

选项默认值说明
thresholds.green524288000安全阈值(500MB)
thresholds.yellow1073741824警告阈值(1GB)
thresholds.red2147483648危险阈值(2GB)
growthRate.low10低增长率阈值(KB/min)
growthRate.medium100中增长率阈值(KB/min)
growthRate.high500高增长率阈值(KB/min)

保护器配置 (Protector)

选项默认值说明
maxMemoryMB512最大内存限制(MB)
thresholds.warning0.70预警阈值(70%)
thresholds.critical0.85严重阈值(85%)
thresholds.emergency0.95紧急阈值(95%)
cooldown60000干预冷却时间(毫秒)

压缩策略 (Compressor)

策略减少目标说明
lossless15%无损压缩,去除重复
lossy40%有损压缩,摘要合并
aggressive70%激进压缩,只保留关键

归档策略 (Archiver)

层级保留时间说明
hot7天内最近数据,快速访问
warm7-30天中期数据,压缩存储
cold30天以上历史数据,深度压缩

报告格式

支持三种格式:

  • text - 纯文本,适合终端查看
  • json - JSON格式,适合程序解析
  • markdown - Markdown格式,适合文档展示

示例报告(text格式):

==================================================
Dreaming Guard Pro - Health Report
Generated: 2026-04-19T12:00:00.000Z
==================================================

[Overall Status]
  Status: HEALTHY
  Health Score: 95/100
  Risk Level: green

[Current State]
  Total Size: 128MB
  Total Files: 42
  Growth Rate: 5 KB/min

[Memory Usage]
  Process RSS: 64MB
  Process Heap: 32/48MB
  System: 2048/8192MB (25%)

[Recommendations]
  - Continue monitoring - system is healthy
  - No immediate action required

工作流程

主循环每30秒执行一次:

Monitor → Analyzer → Decision → Execute
   ↓          ↓          ↓          ↓
 采集数据   分析趋势   决策动作   执行动作

动作类型:

  • no_action - 无需操作
  • notify - 发送通知
  • archive - 触发归档
  • compress - 触发压缩
  • emergency - 紧急处理(压缩+归档)

文件位置

文件默认路径
配置文件~/.openclaw/dreaming-guard.json
状态文件~/.openclaw/dreaming-guard-state.json
日志文件~/.openclaw/logs/dreaming-guard.log
归档目录~/.openclaw/archive/dreaming/
健康报告~/.openclaw/logs/health-report-*.log

环境变量

可通过环境变量覆盖配置:

DREAMING_GUARD_MONITOR_INTERVAL=30000
DREAMING_GUARD_MEMORY_THRESHOLD=512
DREAMING_GUARD_ARCHIVE_PATH=~/.openclaw/archive
DREAMING_GUARD_THRESHOLD_WARNING=524288
DREAMING_GUARD_THRESHOLD_CRITICAL=1048576
DREAMING_GUARD_THRESHOLD_EMERGENCY=2097152

测试

cd projects/dreaming-guard-pro
npm test

或单独测试Phase 5:

node test/test-phase5.js

API摘要

Guard (主入口)

guard.start()           // 启动守护
guard.stop()            // 停止守护
guard.getStatus()       // 获取状态
guard.runOnce()         // 执行一次循环
guard.getHealthReport() // 生成报告
guard.triggerAction()   // 手动触发动作
guard.triggerArchive()  // 手动归档
guard.triggerCompress() // 手动压缩
guard.healthCheck()     // 健康检查

Reporter (报告生成)

reporter.generate(format)      // 生成报告
reporter.getSummary()          // 获取摘要
reporter.formatReport(data, f) // 格式化数据
reporter.saveReport(report)    // 保存报告

技术规格

  • 语言: 纯Node.js
  • 依赖: 零外部依赖(仅使用内置模块)
  • 兼容: Node.js >= 16.0.0
  • 测试: 测试运行时间 < 10秒

License

MIT


开发者: OpenClaw Community
版本: 1.0.0
最后更新: 2026-04-19

Comments

Loading comments...