Presale One-pass Orchestrator

Run or supervise a one-pass Codex implementation with preflight gates, stepwise plan execution, and strict QA defect loop. Use when executing approved presal...

This skill is coherent for managing a one-pass execution of presale plans, but it operates by reading and updating project plan files and verification artifacts in the workspace. Before running it, ensure: (1) the workspace contains only non-sensitive files or that sensitive data is removed, (2) you have backups or version control for plan files the skill may modify, and (3) the meaning/locations of artifacts like `project-context`, `verification matrix`, and `mid-summary` are known and confined to the intended project. If you need stricter controls, run the skill in a restricted environment or review the exact plan files it will act on before allowing modifications.

Type: OpenClaw Skill Name: presale-one-pass-orchestrator Version: 0.1.0 The skill bundle instructs the AI agent to "Run the mapped check command from verification matrix" in `references/qa-defect-loop.md`. This creates a significant command injection or Remote Code Execution (RCE) vulnerability, as the agent is directed to execute commands from an external, unspecified source without explicit sanitization. Additionally, the agent is instructed to "fix implementation" and dynamically select "fallback test runners," indicating broad execution and modification capabilities that, while potentially functional, pose a high risk if the agent's inputs or environment are compromised.