Runtime Verifier

Use when a code change must be verified by actually running the app, endpoint, or CLI flow instead of relying only on unit tests.

This skill is coherent with its stated purpose but is intentionally high-level and grants the agent broad ability to run processes and interact with systems. Before installing or using it: (1) require a clear, pre-authorized verification plan that lists exact commands, files, ports, and endpoints the agent may use; (2) run verifications in an isolated sandbox/container or test environment to avoid exposing secrets or production data; (3) avoid providing long-lived credentials — use ephemeral or scoped credentials if external services are needed; (4) ask the skill author to declare required binaries and any expected environment variables; and (5) consider adding explicit guardrails in the prompt or platform (no network access, no reading of ~/ or /etc, etc.) to limit accidental access to sensitive data.

Type: OpenClaw Skill Name: runtime-verifier Version: 1.0.0 The runtime-verifier skill bundle provides instructions for an AI agent to verify software changes by executing them in a live environment. The workflow described in SKILL.md and agents/openai.yaml is consistent with its stated purpose of runtime verification, including planning, execution, and cleanup. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.