← Back to Skills Marketplace
Ralph Loops
by
qlifebot-coder
· GitHub ↗
· v1.0.2
5692
Downloads
1
Stars
25
Active Installs
3
Versions
Install in OpenClaw
/install ralph-loops
Description
Runs autonomous iterative AI loops for requirements, planning, or building phases using structured prompts and fresh context per iteration.
Usage Guidance
Install only in an isolated development workspace with a disposable branch and limited credentials. Review or disable automatic git push, avoid using --check-cmd with untrusted input, do not run the dashboard on a shared network, and expect the loop to edit files, run commands, consume API budget, and keep running until stopped.
Capability Analysis
Type: OpenClaw Skill
Name: ralph-loops
Version: 1.0.2
This skill is classified as suspicious due to its reliance on `--dangerously-skip-permissions` for the Claude CLI, which grants the AI agent full system access, bypassing all built-in safeguards. Additionally, the `scripts/ralph-loop.mjs` script includes a `checkCmd` argument that allows arbitrary command execution via `execSync`, creating a direct command injection vector if the agent's arguments can be manipulated. The skill also instructs the agent to perform `git push` operations and use the `browser` tool to open URLs (e.g., `browser action=open targetUrl="http://localhost:PORT"`), which are powerful capabilities that, while intended for development, significantly increase the attack surface for prompt injection or misuse. These risky capabilities are present in `SKILL.md`, `scripts/ralph-loop.mjs`, `templates/loop.sh`, and `templates/PROMPT_build.md`.
Capability Assessment
Purpose & Capability
The core purpose is coherent: iterative AI development loops with planning, building, commits, and a dashboard. The concern is that the capability is high-impact by design, including autonomous file edits, command execution, commits, automatic git push, background execution, and stop controls.
Instruction Scope
The safety section discloses that autonomous mode bypasses Claude permissions, but the quick-start/build examples do not consistently foreground that build loops may mutate files, run commands, commit, and push remotely. Some trigger-phrase instructions also move quickly from conversational intent to shell execution.
Install Mechanism
Setup asks users to install dashboard npm dependencies and a specific global Claude Code version. This is disclosed and has no hidden installer, but it changes the local toolchain and should be done in an isolated development environment.
Credentials
The skill runs from the user's workspace, stores loop state in /tmp, archives history under ~/clawd/logs, may use git/network via git push, and includes code for reading local Clawdbot transcripts. Those accesses are partly purpose-aligned but broad for sensitive projects.
Persistence & Privilege
Loops are intended to run autonomously in the background, and the dashboard exposes unauthenticated local API actions that can stop loops using pgrep/pkill pattern matching. The process/session termination behavior is not tightly scoped to tracked Ralph-owned PIDs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ralph-loops - After installation, invoke the skill by name or use
/ralph-loops - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Added warning: don't block conversation while monitoring loops
v1.0.1
Added credits/attribution
v1.0.0
Initial release: autonomous building with Geoffrey Huntley methodology
Metadata
Frequently Asked Questions
What is Ralph Loops?
Runs autonomous iterative AI loops for requirements, planning, or building phases using structured prompts and fresh context per iteration. It is an AI Agent Skill for Claude Code / OpenClaw, with 5692 downloads so far.
How do I install Ralph Loops?
Run "/install ralph-loops" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ralph Loops free?
Yes, Ralph Loops is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Ralph Loops support?
Ralph Loops is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ralph Loops?
It is built and maintained by qlifebot-coder (@qlifebot-coder); the current version is v1.0.2.
More Skills