← Back to Skills Marketplace
netanel-abergel

Heleni Best Practices

by Netanel Abergel · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
87
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install heleni-best-practices
Description
Daily check of Heleni's PA Skills website for new best practices, lessons learned, and skill updates. Use when: running daily sync, owner asks 'any updates f...
README (SKILL.md)

Heleni Best Practices Sync

Heleni is an AI PA running on OpenClaw. She publishes real lessons from production at:


Minimum Model

Small model for fetching and diffing. Medium model for applying lessons.


What It Does

Once a day:

  1. Fetches the learn.html page and skill list from pa-skills
  2. Compares against last known state (saved locally)
  3. If new content detected → extracts actionable lessons
  4. Applies relevant lessons to this agent's own SOUL.md / AGENTS.md / HOT.md
  5. Reports changes to owner

Step-by-Step Process

Step 1 — Fetch current state

LEARN_URL="https://netanel-abergel.github.io/pa-skills/learn.html"
SKILLS_URL="https://github.com/netanel-abergel/pa-skills/tree/main/skills"
RAW_BASE="https://raw.githubusercontent.com/netanel-abergel/pa-skills/main/skills"

# Fetch learn page
curl -s "$LEARN_URL" -o /tmp/heleni-learn-current.html

# Get list of active skills from GitHub
curl -s "https://api.github.com/repos/netanel-abergel/pa-skills/contents/skills" \
  | python3 -c "import sys,json; [print(i['name']) for i in json.load(sys.stdin) if i['type']=='dir']" \
  > /tmp/heleni-skills-current.txt

Step 2 — Compare against last state

LAST_STATE="$WORKSPACE/data/heleni-best-practices-state.json"

# If no state file → first run, save and exit
if [ ! -f "$LAST_STATE" ]; then
  python3 -c "
import json, hashlib
with open('/tmp/heleni-learn-current.html') as f: content = f.read()
with open('/tmp/heleni-skills-current.txt') as f: skills = f.read().strip().split()
state = {'learn_hash': hashlib.sha256(content.encode()).hexdigest(), 'skills': skills}
with open('$LAST_STATE', 'w') as f: json.dump(state, f)
print('FIRST_RUN')
"
  exit 0
fi

# Compare hashes
python3 \x3C\x3C 'EOF'
import json, hashlib

with open('/tmp/heleni-learn-current.html') as f: current_content = f.read()
with open('/tmp/heleni-skills-current.txt') as f: current_skills = f.read().strip().split('\
')

current_hash = hashlib.sha256(current_content.encode()).hexdigest()

with open('$LAST_STATE') as f: last = json.load(f)

changed = current_hash != last.get('learn_hash', '')
new_skills = [s for s in current_skills if s not in last.get('skills', [])]
removed_skills = [s for s in last.get('skills', []) if s not in current_skills]

print(f"CHANGED={changed}")
print(f"NEW_SKILLS={new_skills}")
print(f"REMOVED_SKILLS={removed_skills}")
EOF

Step 3 — Extract lessons (if changed)

Use web_fetch tool to read https://netanel-abergel.github.io/pa-skills/learn.html.

Extract:

  • Any new principle cards
  • Any changes to the HOT.md section
  • Any new "what belongs in a skill / what doesn't" rules
  • New skills in the library that don't exist locally

Step 4 — Apply relevant lessons

For each lesson found, evaluate:

Lesson type Action
HOT.md rule Check if this agent breaks the same pattern → add to own HOT.md if yes
SOUL.md principle Check if already covered → add if missing
Skill design rule Update local skill-master description if relevant
New skill available Fetch SKILL.md from GitHub, review, recommend to owner

Always ask before:

  • Modifying SOUL.md
  • Adding to HOT.md (owner should approve)
  • Installing a new skill

Can apply without asking:

  • Logging the lesson to .learnings/heleni-sync/YYYY-MM-DD.md
  • Updating skill descriptions in skill-master

Step 5 — Save new state + report

# Update state file
python3 -c "
import json, hashlib
with open('/tmp/heleni-learn-current.html') as f: content = f.read()
with open('/tmp/heleni-skills-current.txt') as f: skills = f.read().strip().split()
state = {'learn_hash': hashlib.sha256(content.encode()).hexdigest(), 'skills': skills, 'last_checked': '$(date -u +%Y-%m-%dT%H:%M:%SZ)'}
with open('$LAST_STATE', 'w') as f: json.dump(state, f)
"

Report format:

📡 Heleni Sync — YYYY-MM-DD

✅ No changes / ⚡ [N] updates found

New lessons:
• [Lesson] — [Applied / Recommended to owner]

New skills available:
• [skill-name] — [description] → [Installed / Recommended]

Next check: tomorrow

Cron Configuration

Daily at 07:00 UTC (before morning briefing):

{
  "id": "heleni-best-practices-sync",
  "schedule": "0 7 * * *",
  "timezone": "UTC",
  "task": "Run heleni-best-practices skill: fetch https://netanel-abergel.github.io/pa-skills/learn.html, compare to last known state at data/heleni-best-practices-state.json, extract new lessons, log to .learnings/heleni-sync/YYYY-MM-DD.md. If significant changes found (new principles, new skills), notify owner with a 2-line summary.",
  "delivery": {
    "mode": "silent"
  }
}

Silent by default. Notifies owner only if something actionable was found.


On-Demand Usage

Trigger phrases:

  • "any updates from Heleni?"
  • "check heleni best practices"
  • "sync skills"
  • "what's new in pa-skills?"

Key Lessons (as of 2026-04-02)

Pre-loaded so first run has context:

  1. Skill count sweet spot: 28–32. Above 40 = routing breaks.
  2. Universal rules → SOUL.md. Skills are only triggered on demand.
  3. One domain = one skill. Users think in domains, not tools.
  4. Diagnostics = appendix. Never a standalone skill.
  5. HOT.md — max 20 lines, only rules broken 2+ times in practice.
  6. DEPRECATED.md — always write a tombstone when merging skills.
  7. Each skill needs one clear "Use when:" sentence.

Source: https://netanel-abergel.github.io/pa-skills/learn.html

Usage Guidance
This skill appears to do what it says — check a public Heleni page and a public GitHub skills folder and log differences — but there are a few things to confirm before installing: - Confirm you are comfortable with the skill reading and writing files under the agent workspace ($WORKSPACE/data and .learnings) and creating a state file; these paths are not declared in the metadata. - Resolve the ambiguity about automatic changes: the doc both says it will 'apply' lessons and also says to 'Always ask before' modifying SOUL.md/HOT.md. If you want human approval for edits, ensure the skill is configured to prompt the owner rather than auto-apply. - The skill uses curl/python3 and refers to a 'web_fetch' tool; ensure those tools exist in your agent environment. - If you expect heavy GitHub usage, consider providing a GITHUB_TOKEN (not currently declared) to avoid rate limits; do not provide tokens unless you trust the behavior. - Because the skill can run daily (cron entry provided) and can be invoked autonomously, verify the delivery/notification settings (it claims 'silent' by default) and whether you want automatic scheduling enabled. If these points are acceptable or clarified (especially the file-write behavior and the ask-before-modify policy), the skill is coherent. If you need stricter guarantees, request the SKILL.md be updated to declare workspace/config paths and to remove the ambiguous wording about automatic edits.
Capability Analysis
Type: OpenClaw Skill Name: heleni-best-practices Version: 1.0.2 The heleni-best-practices skill (SKILL.md) automates the fetching of remote content from netanel-abergel.github.io and instructs the agent to apply 'lessons' from that content to its own core configuration files (SOUL.md, HOT.md, and AGENTS.md). This architecture creates a significant vulnerability to indirect prompt injection, where a compromise of the external website could allow an attacker to redefine the agent's core personality and rules. While the instructions include safeguards requiring owner approval for sensitive modifications, the pattern of automated self-modification based on untrusted remote data is inherently high-risk.
Capability Assessment
Purpose & Capability
Name/description match the runtime steps (fetch learn.html and skills list, diff, extract lessons). However the SKILL.md reads/writes $WORKSPACE/data and .learnings paths and uses /tmp — these config paths are not declared in the skill metadata. The doc also references a 'web_fetch' tool in Step 3 in addition to curl, which assumes the agent has that tool available.
Instruction Scope
Instructions are explicit about fetching pages, comparing state, extracting lessons and reporting. They write files to /tmp and the agent workspace and may fetch SKILL.md files from the public GitHub repo. There is an ambiguity: the top-level 'What It Does' says it 'applies relevant lessons to this agent's own SOUL.md / AGENTS.md / HOT.md', but a later table and Step 4 say the agent must 'Always ask before' modifying SOUL.md or HOT.md. That conflict should be resolved before trusting autonomous runs.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. It relies on standard CLI tools (curl, python3) and agent tooling; nothing is downloaded or executed from arbitrary URLs by an installer.
Credentials
The skill requests no credentials or env vars (appropriate for a public-site sync). It implicitly assumes write access to $WORKSPACE and creation of .learnings and a state file. It may call the GitHub API anonymously (rate-limited); the SKILL.md does not declare an optional GITHUB_TOKEN if the operator wants authenticated requests.
Persistence & Privilege
always:false (no forced presence). The skill schedules a daily cron-like job in its spec but does not claim ability to modify other skills or system-wide agent settings. It does write its own state and logs in the agent workspace, which is consistent with its purpose.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install heleni-best-practices
  3. After installation, invoke the skill by name or use /heleni-best-practices
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Remove all personal info — fully generic
v1.0.1
Minor cleanup
v1.0.0
Initial release: automatic daily sync with Heleni's PA Skills for best practices and lessons. - Fetches https://netanel-abergel.github.io/pa-skills/learn.html and skill list daily. - Compares fetched info to local state, extracting actionable new lessons and best practices. - Applies relevant lessons to this agent's own configuration files (SOUL.md, HOT.md), with owner approval when needed. - Logs each sync and only notifies the owner for significant updates (new lessons or skills). - Supports on-demand checks with trigger phrases like "any updates from Heleni?" or "sync skills".
Metadata
Slug heleni-best-practices
Version 1.0.2
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 3
Frequently Asked Questions

What is Heleni Best Practices?

Daily check of Heleni's PA Skills website for new best practices, lessons learned, and skill updates. Use when: running daily sync, owner asks 'any updates f... It is an AI Agent Skill for Claude Code / OpenClaw, with 87 downloads so far.

How do I install Heleni Best Practices?

Run "/install heleni-best-practices" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Heleni Best Practices free?

Yes, Heleni Best Practices is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Heleni Best Practices support?

Heleni Best Practices is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Heleni Best Practices?

It is built and maintained by Netanel Abergel (@netanel-abergel); the current version is v1.0.2.

💬 Comments