Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

OpenClaw Session Cleanup

v1.0.0

Clean up accumulated subagent and cron:run child sessions in OpenClaw to fix slow subagent startup. Use when: subagents are slow to start, sessions.json is t...

0· 75·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lrddrl/openclaw-session-cleanup-ruodon.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "OpenClaw Session Cleanup" (lrddrl/openclaw-session-cleanup-ruodon) from ClawHub.
Skill page: https://clawhub.ai/lrddrl/openclaw-session-cleanup-ruodon
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-session-cleanup-ruodon

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-session-cleanup-ruodon
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (clean OpenClaw sessions.json to speed subagents) is consistent with the actions described (stop gateway, run cleanup script, restart). However the SKILL.md assumes a cleanup.ps1 script exists; the skill bundle contains no code or install step that supplies that script, which is an inconsistency worth noting.
!
Instruction Scope
The instructions tell the user to stop the gateway, run a PowerShell cleanup script (with a dangerous -CleanJsonl flag that deletes conversation history), and restart the gateway. That behavior is in-scope for session cleanup, but the doc presumes a local .\cleanup.ps1 is present and gives a destructive option. The skill does not provide the script, nor does it include cross-platform variants (only PowerShell examples), so following these instructions without verifying the script could delete user data.
Install Mechanism
No install spec or downloaded code is present, so nothing is written to disk by the skill itself. This minimizes supply-chain risk, but also means the missing cleanup script must come from elsewhere.
Credentials
The skill requests no environment variables, credentials, or config paths. There is no sign of unrelated credential access.
Persistence & Privilege
always:false and normal invocation settings. The skill does not request persistent presence or modification of other skills or system-wide settings.
What to consider before installing
This SKILL.md describes a reasonable maintenance task but does not ship the cleanup.ps1 script it tells you to run. Before using it: (1) locate or obtain the cleanup.ps1 it expects and inspect its contents thoroughly — do not run unknown PowerShell. (2) Back up sessions.json and any .jsonl files; prefer the documented -DryRun first to preview changes. (3) Avoid the -CleanJsonl flag unless you intentionally want to permanently delete conversation history. (4) Confirm your environment (PowerShell available, OpenClaw CLI installed) and, if you're not on Windows, ask for or create an equivalent script for your OS. If the skill author can provide the cleanup script or the SKILL.md is updated to include the script contents or a trusted install step, re-evaluate — that would likely make the skill coherent and lower-risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f1tyv9yer6296dvkssxz69184htg5
75downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

keywords:

  • session cleanup
  • subagent slow
  • sessions.json too large
  • child session accumulation
  • session compact
  • clean sessions
  • subagent startup slow
  • gateway slow
  • session too many
  • 清理 session
  • subagent 启动慢
  • sessions.json 太大

OpenClaw Session Cleanup

Background / 背景

Every subagent call and cron job execution leaves an entry in sessions.json. After a few days of use, hundreds of entries accumulate, causing the gateway to slow down when starting new subagents.

Symptom: Subagent startup goes from a few seconds to 10+ seconds. Root cause: Completed child session entries piling up in sessions.json. Fix: Remove subagent and cron:run child session records, keep main and channel sessions.

每次 subagent 调用和 cron job 执行都会在 sessions.json 中留下记录。积累几百条后,gateway 启动 subagent 时明显变慢。

症状: subagent 启动时间从几秒变成十几秒甚至更长。 根因: sessions.json 中积累了大量已完成的 child session 索引。 解法: 删除 subagent 和 cron:run 类型的 child session 记录,保留主 session 和 channel session。


Steps / 操作步骤

Step 1: Stop Gateway

openclaw gateway stop

Step 2: Run cleanup script

.\cleanup.ps1             # 清理 sessions.json 索引(默认保留 .jsonl 文件)
.\cleanup.ps1 -DryRun     # 预览模式,不实际修改
.\cleanup.ps1 -KeepJsonl  # 保留 .jsonl history 文件(明确指定,不删)
.\cleanup.ps1 -CleanJsonl # 危险!同时删除 .jsonl 文件(对话历史会丢失)

Step 3: Restart Gateway

openclaw gateway

What is kept / 保留规则

Session typeExample keyAction
Main sessionagent:main:main✅ Keep
WhatsAppagent:main:whatsapp:direct:+1xxx✅ Keep
Telegramagent:main:telegram:direct:xxx✅ Keep
Signalagent:main:signal:direct:+1xxx✅ Keep
Google Chatagent:main:google chat:direct:xxx✅ Keep
Lineagent:main:line:direct:xxx✅ Keep
WeChatagent:main:wechat:direct:xxx✅ Keep
iMessage / SMSagent:main:imessage:direct:xxx✅ Keep
BlueBubbles (iOS)agent:main:bluebubbles:direct:xxx✅ Keep
其他 channel sessionagent:main:<channel>:...✅ Keep
Cron definitionagent:main:cron:uuid✅ Keep
Cron run recordagent:main:cron:uuid:run:uuid❌ Delete
Subagent sessionagent:main:subagent:uuid❌ Delete
其他 child sessionagent:main:<type>:...❌ Delete

⚠️ 关于 .jsonl 文件(对话历史)

默认不删除 .jsonl 文件。 .jsonl 包含完整的对话历史,删除后无法恢复。 如需清理 .jsonl,必须加 -CleanJsonl 参数:

.\cleanup.ps1 -CleanJsonl    # 清理 sessions.json 索引 + 删除 .jsonl 文件

Comments

Loading comments...