DeepTask

What to consider before installing/using DeepTask: - The tool will create and write code files and run unit tests (it executes code on your machine). That means arbitrary code (AI-generated or stored tests) can run commands on your host — only use it where you trust the inputs (e.g., an isolated VM/container or an empty, disposable workspace). - It will initialize git and automatically commit changes to whatever project directory you configure (default ~/.openclaw/workspace/project_<ID>). Ensure the workspace is not pointed at important repositories or directories containing secrets to avoid accidental commits of sensitive data. - Review the bundled scripts (ai_worker.py, cli.py, db_manager.py) before running. Pay attention to how test_code or code_content from the DB is executed. If you need to run it, prefer a sandbox (container, VM) and disable network or restrict permissions where possible. - Recommended mitigations: set workspace to an isolated directory, back up important repos first, inspect/approve generated code before letting the skill run cycles that auto-commit, and consider running under a user account with limited access. If you need higher assurance, request the full untruncated code paths for review of the unit-test execution functions (run_unit_test/_run_python_test/_run_moon_test) to audit how tests are invoked and whether they can spawn unbounded shell commands.