Agent session 运维工具。当需要检测和恢复 API 限速、回收死 session 的知识、在破坏性操作前自动快照、或监控 context 使用率时使用。不用于安装 hook 脚本（用 agent-hooks）或架构设计（用 harness-design-patterns）。

This skill is coherent with its stated goal of managing agent sessions, but it assumes and performs actions you should review before installing. Before you proceed: - Inspect the scripts (context-usage.sh and the reference patterns) yourself. They are small and readable. - Ensure the environment where you run this has tmux, git, and jq installed; the package metadata should declare these but currently does not. Don't run it on a system lacking those tools or on production hosts without testing. - Understand side effects: the skill will read transcripts, write files to sessions/<session-id>/, create git checkpoints with `git add -A` (temporarily changing the index), and may apply stashes on rollback. Back up repositories or test in an isolated workspace. - Pay attention to the tmux recovery logic: although it checks pane contents before sending Enter, regex checks can miss prompts. Prefer manual recovery when sessions run destructive shells; consider limiting which sessions the daemon scans. - If you plan to enable a daemon/cron, control its user account and file permissions (sessions/ should be accessible only to the intended user) to avoid leaking transcripts or scavenged data. - Ask the publisher to update metadata: list required binaries (tmux, jq, git) and explicitly document the directories it writes to and the daemon behavior. If you are not comfortable with automatic keystrokes or automatic git operations, do not install or run these components.

Type: OpenClaw Skill Name: agent-ops Version: 1.1.0 The skill bundle provides tools for monitoring and recovering AI agent sessions, including a script for token usage estimation (scripts/context-usage.sh) and several design patterns. While the intent is operational maintenance, the bundle is classified as suspicious due to high-risk capabilities described in the documentation (references/04-rate-limit.md and references/19-checkpoint-rollback.md). Specifically, it instructs the agent to use 'tmux send-keys' to inject Enter commands into active terminal panes and 'git add -A' followed by 'git stash' to automate state snapshots. These behaviors, particularly automated keystroke injection into other terminal sessions, represent a significant risk of unintended command execution or state corruption if the safety filters (regex-based checks for confirmation prompts) are bypassed or fail.