← Back to Skills Marketplace
Pilot Alert
by
Calin Teodor
· GitHub ↗
· v1.0.0
· MIT-0
96
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install pilot-alert
Description
Configurable alerting on event patterns with webhook and message delivery. Use this skill when: 1. You need to trigger alerts based on event patterns or thre...
Usage Guidance
This skill appears to do what it claims, but there are practical gaps and a minor safety issue. Before installing: 1) Confirm pilotctl daemon and pilot-protocol trust boundaries — restrict which agents this skill can message. 2) Provide webhook secrets (e.g., WEBHOOK_URL) via a secure method (env vars/secret store) instead of hard-coding; the SKILL.md should list this as a required env var. 3) Ensure required system utilities exist (md5sum, bc, grep, mv, date) or adapt the scripts for your platform (macOS uses md5). 4) Fix unsafe JSON construction: build payloads with jq's --arg or jq programmatic constructors to avoid injection/malformed JSON when event text contains quotes/newlines. 5) If you will run these scripts on shared hosts, tighten file permissions for /tmp/alert-cache.txt or place the cache in a secure directory. If you cannot verify or harden these items, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: pilot-alert
Version: 1.0.0
The pilot-alert skill provides legitimate functionality for event monitoring and alerting within the pilot-protocol ecosystem. The SKILL.md file contains well-structured Bash scripts for subscribing to event streams, sending Slack webhooks via curl, and implementing alert deduplication using local temporary files. No indicators of data exfiltration, malicious execution, or prompt injection were found.
Capability Assessment
Purpose & Capability
Name, description, and provided workflows all describe subscribing to events and delivering alerts via webhooks and pilotctl; required binaries pilotctl, jq, and curl are sensible for this purpose and the skill correctly requires the pilot-protocol skill and a running daemon.
Instruction Scope
The SKILL.md stays inside alerting scope but contains practical omissions and risky patterns: examples reference WEBHOOK_URL (a secret) but the skill does not declare or document required env vars; scripts write to /tmp/alert-cache.txt (local state) without guidance on permissions; some event fields are interpolated directly into JSON sent to pilotctl (e.g., --data "{\"message\":\"$message\"}") which can break JSON or enable injection if event text contains quotes/newlines; the instructions also assume additional utilities (md5sum, bc, grep, mv, date) without declaring them.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk because nothing is fetched or written by an installer.
Credentials
The skill requests no credentials in metadata (reasonable), but examples require a webhook URL/secret (WEBHOOK_URL) and the README mentions 'trust with source agents' — users must supply webhook secrets and grant pilotctl messaging permissions out-of-band. The lack of declared env vars for these secrets is an omission that could lead to misconfiguration or accidental exposure if users paste secrets into scripts.
Persistence & Privilege
always:false (normal). The skill needs the ability to send messages via pilotctl to other agents (oncall-agent), which is coherent for alerting but effectively grants the skill a messaging capability across agents — ensure pilotctl permissions and the 'trust' relationships are limited to intended recipients.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pilot-alert - After installation, invoke the skill by name or use
/pilot-alert - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of pilot-alert.
- Provides configurable alerting on event patterns with webhook and message delivery.
- Supports aggregation, deduplication, and escalation to on-call agents.
- Enables webhook delivery for external services (Slack, Discord, PagerDuty).
- Includes example workflows for critical error, threshold, and deduplication alerting.
- Requires pilot-protocol skill, pilotctl, jq, curl, and a running daemon.
Metadata
Frequently Asked Questions
What is Pilot Alert?
Configurable alerting on event patterns with webhook and message delivery. Use this skill when: 1. You need to trigger alerts based on event patterns or thre... It is an AI Agent Skill for Claude Code / OpenClaw, with 96 downloads so far.
How do I install Pilot Alert?
Run "/install pilot-alert" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pilot Alert free?
Yes, Pilot Alert is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pilot Alert support?
Pilot Alert is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pilot Alert?
It is built and maintained by Calin Teodor (@teoslayer); the current version is v1.0.0.
More Skills