ClawHub

Self Review

v1.0.0

Automatically evaluates and approves agent outputs based on clarity, conciseness, actionability, and structure using a rule-based system.

⭐ 0· 735·8 current·8 all-time
by@leic8959-sudo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description match the implementation: a local rule-based quality gate. One small inconsistency: the runtime requires Node.js (index.js and command use `node`) but the skill's manifest/requirements do not declare node as a required binary. This is a documentation/metadata omission rather than a functional mismatch.
✓
Instruction Scope
SKILL.md and README instruct piping agent output into the included index.js and editing thresholds in the file. The instructions do not request unrelated files, environment variables, or external network calls. README mentions future plans (e.g., writing review history) but current code does not perform that I/O.
✓
Install Mechanism
No install spec (instruction-only) and index.js is executed directly; no downloads or external packages are fetched. Low-risk installation profile.
✓
Credentials
Skill declares no environment variables or credentials and the code does not access environment variables or secrets. No disproportionate credential requests.
✓
Persistence & Privilege
always is false, the skill does not request persistent presence, and it does not modify other skills or system-wide settings. It exits with codes 0/1 to signal approval; no privileged operations are present.
Assessment
This skill appears to be a simple, local Node.js script that scores text by a few heuristics — generally safe and coherent with its description. Before installing: (1) ensure Node.js is available where the agent runs (the manifest omits this), (2) review any agent integration points (the README mentions calling it in HEARTBEAT or before sending responses), and (3) be aware future versions may add history logging or LLM API calls (README TODOs); if you don't trust the author, run the script in an isolated environment first.

Like a lobster shell, security has layers — review code before you run it.

automationvk97exwvw1yqqbqtpct6wfrp7bh81knd9latestvk97exwvw1yqqbqtpct6wfrp7bh81knd9qualityvk97exwvw1yqqbqtpct6wfrp7bh81knd9token-optimizationvk97exwvw1yqqbqtpct6wfrp7bh81knd9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments