← Back to Skills Marketplace
yuyonghao-123

Proactive Agent

by yuyonghao-123 · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
130
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install yuyonghao-proactive-agent
Description
Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autono...
Usage Guidance
This bundle is largely a design/operational handbook plus a local security-audit script — not a downloader — so it's not obviously malicious. Before installing or enabling it: 1) Read SKILL.md and AGENTS.md fully and resolve the contradictory guidance (especially the 'Don't ask permission. Just do it.' line) — insist the agent require explicit approval for external/irreversible actions. 2) Run ./scripts/security-audit.sh yourself in a safe, local environment to see what it reads (it checks $HOME/.clawdbot and /tmp logs if present). 3) Test the skill in an isolated workspace without network/tool permissions so you can confirm its file reads/writes are limited to the workspace. 4) If you plan to grant the agent tool or network access, remove or clarify any instructions that allow spawning other agents or autonomous crons until you have precise consent rules. 5) If you are not comfortable resolving the ambiguous guardrails, treat this skill as potentially risky and avoid giving it elevated privileges or credentials.
Capability Analysis
Type: OpenClaw Skill Name: yuyonghao-proactive-agent Version: 0.1.0 The proactive-agent skill bundle is a comprehensive framework designed to enhance AI agent autonomy, memory persistence, and security. It introduces sophisticated protocols like WAL (Write-Ahead Logging) and Working Buffers to manage LLM context limits, and includes a defensive 'security-audit.sh' script to identify local risks such as exposed secrets or improper file permissions. Crucially, the instructions in SKILL.md and AGENTS.md explicitly command the agent to defend against prompt injection by treating external content as data rather than instructions, and mandate human approval for any external or destructive actions. The bundle appears well-architected for its stated purpose and lacks any indicators of malicious intent or data exfiltration.
Capability Assessment
Purpose & Capability
The files (SKILL.md, AGENTS.md, HEARTBEAT.md, memory files, and a security audit script) line up with the declared purpose of creating a proactive, persistent agent: they instruct the agent to read/write workspace files, capture memory, and run a local audit. Nothing in the bundle requires unrelated credentials or external services. However, a short, isolated line in AGENTS.md (‘Don't ask permission. Just do it.’) conflicts with many other explicit guardrails that require human approval for external actions, creating ambiguity about how aggressive the agent should be.
Instruction Scope
The runtime instructions intentionally direct the agent to read and write many workspace files (ONBOARDING.md, USER.md, SESSION-STATE.md, memory files, working-buffer.md) and to run the included security-audit.sh. Those actions are coherent with the skill's purpose. The concern is mixed guidance: the repo repeatedly warns against executing external content or sending data out, yet elsewhere encourages aggressive behaviors (e.g., 'Don't ask permission', 'Use every tool', 'spawn agents', 'Autonomous Crons') — this grants broad operational latitude that could lead to scope creep. Also, the SKILL.md and references include many explicit examples of prompt-injection strings (used for detection), so a reviewer should confirm those are examples and not active instructions the agent will follow from fetched content.
Install Mechanism
There is no install spec and the skill is instruction-first with a single helper script. No downloads, package installations, or extracted archives are present. The only executable is a local audit shell script included in the repo; it operates on local files/configs and does not fetch remote code.
Credentials
The skill does not request any environment variables, binaries, or external credentials. The included docs recommend storing credentials in a .credentials directory and the audit script checks for .clawdbot config under $HOME — reasonable for a local agent. Because no external secrets are requested, credentials access appears proportionate. Still, the audit script inspects HOME-level config and /tmp logs if present, so users should be aware it reads local files outside the skill folder when run.
Persistence & Privilege
always:false and model invocation is allowed (platform default). The skill expects to write/read files in the workspace (e.g., copying assets, updating USER.md/SOUL.md/SESSION-STATE.md), which is normal for a stateful agent. There is no indication it modifies other skills or global agent settings, but some wording encourages autonomous actions (Autonomous Crons, spawning agents). Combined with the ambiguous 'Don't ask permission' text, this could increase the blast radius if the agent is given network or tool access.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install yuyonghao-proactive-agent
  3. After installation, invoke the skill by name or use /yuyonghao-proactive-agent
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
proactive-agent v3.1.0 adds key proactivity and reliability features to AI agents. - New guidance on autonomous vs prompted crons (`systemEvent` vs `isolated agentTurn`) - Reinforces "verify implementation, not intent" for robust changes - Introduces a tool migration checklist for safe deprecation and updates - Expands documentation on WAL Protocol, Working Buffer, and compaction handling - Updates memory safety, security hardening, and self-improvement guardrails
Metadata
Slug yuyonghao-proactive-agent
Version 0.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Proactive Agent?

Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autono... It is an AI Agent Skill for Claude Code / OpenClaw, with 130 downloads so far.

How do I install Proactive Agent?

Run "/install yuyonghao-proactive-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Proactive Agent free?

Yes, Proactive Agent is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Proactive Agent support?

Proactive Agent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Proactive Agent?

It is built and maintained by yuyonghao-123 (@yuyonghao-123); the current version is v0.1.0.

💬 Comments