← Back to Skills Marketplace
Ralph Loops
by
qlifebot-coder
· GitHub ↗
· v1.0.2
6270
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install ralph-loops
Description
Runs autonomous iterative AI loops for requirements, planning, or building phases using structured prompts and fresh context per iteration.
Usage Guidance
Install only in an isolated repository or VM with minimal credentials. Review the templates before running, remove or disable automatic git push/tag behavior unless you explicitly want remote publication, and do not expose the dashboard to a network without authentication.
Capability Analysis
Type: OpenClaw Skill
Name: ralph-loops
Version: 1.0.2
This skill is classified as suspicious due to its reliance on `--dangerously-skip-permissions` for the Claude CLI, which grants the AI agent full system access, bypassing all built-in safeguards. Additionally, the `scripts/ralph-loop.mjs` script includes a `checkCmd` argument that allows arbitrary command execution via `execSync`, creating a direct command injection vector if the agent's arguments can be manipulated. The skill also instructs the agent to perform `git push` operations and use the `browser` tool to open URLs (e.g., `browser action=open targetUrl="http://localhost:PORT"`), which are powerful capabilities that, while intended for development, significantly increase the attack surface for prompt injection or misuse. These risky capabilities are present in `SKILL.md`, `scripts/ralph-loop.mjs`, `templates/loop.sh`, and `templates/PROMPT_build.md`.
Capability Assessment
Purpose & Capability
The stated purpose is autonomous iterative development, and the artifacts match that purpose, but the capability set is high impact: Claude is run with permission checks bypassed, prompts direct repository edits and commits, and templates push to git remotes.
Instruction Scope
The skill discloses the permission bypass later in its safety section, but quick-start and template flows can start broad autonomous loops without a strong per-run approval gate; build prompts also allow large-scale repo search, subagents, spec rewrites, tags, commits, and pushes.
Install Mechanism
Installation is conventional for a Node dashboard and Claude Code dependency, with no hidden install-time execution found, but it recommends a global Claude Code version change and npm dependency installation.
Credentials
Running from the user's workspace/home context plus bypassed Claude permissions is broader than ordinary skill execution; the dashboard also reads local loop state and Clawdbot transcripts and enables permissive CORS without authentication.
Persistence & Privilege
The loop is intentionally long-running and writes state to /tmp and archives to ~/clawd/logs/ralph-archive; it does not install an autostart service, but it can persist autonomous work across many iterations and publish changes via git push.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ralph-loops - After installation, invoke the skill by name or use
/ralph-loops - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Added warning: don't block conversation while monitoring loops
v1.0.1
Added credits/attribution
v1.0.0
Initial release: autonomous building with Geoffrey Huntley methodology
Metadata
Frequently Asked Questions
What is Ralph Loops?
Runs autonomous iterative AI loops for requirements, planning, or building phases using structured prompts and fresh context per iteration. It is an AI Agent Skill for Claude Code / OpenClaw, with 6270 downloads so far.
How do I install Ralph Loops?
Run "/install ralph-loops" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ralph Loops free?
Yes, Ralph Loops is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Ralph Loops support?
Ralph Loops is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ralph Loops?
It is built and maintained by qlifebot-coder (@qlifebot-coder); the current version is v1.0.2.
More Skills