← Back to Skills Marketplace
danielsinewe

Runtime Instructions Control Plane

by Daniel Sinewe · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
88
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install runtime-instructions-control-plane
Description
Load per-job runtime instructions from Google Sheets, cache them locally, and reconcile cron job enablement flags safely for OpenClaw operations.
Usage Guidance
This package appears to do what it says, but pay attention before you run it: (1) The skill needs GOOGLE_SHEETS_SPREADSHEET_ID and authentication — either a Google service-account private key (GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY) or an authenticated gcloud CLI for token fallback. The registry metadata does not list these, so don't rely on the registry summary. (2) The reconcile script will modify your local OpenClaw cron jobs JSON (default ~/.openclaw/cron/jobs.json) — test with the dry-run first and keep backups. (3) If you provide a service account key, create a least-privilege account limited to sheets.readonly and restrict where the key is stored. (4) Review the included scripts before running and prefer running load-script in local-only mode for testing. If you need to proceed broadly, ask the publisher to correct the registry metadata to list required env vars and clarify the differing auth requirements between the two scripts.
Capability Analysis
Type: OpenClaw Skill Name: runtime-instructions-control-plane Version: 0.1.0 The skill bundle provides a legitimate control plane for managing OpenClaw job instructions via Google Sheets. The scripts (load-sheet-instructions.mjs and reconcile-cron-from-sheet.mjs) implement standard OAuth2 JWT signing for Google Service Accounts and use gcloud CLI as a fallback for authentication. The code includes defensive features such as timestamped backups before modifying local configurations and a 'non-overridable' instruction block designed to prevent external sheet data from hijacking the agent's core constraints (a defense against prompt injection). No evidence of data exfiltration or unauthorized execution was found.
Capability Tags
cryptorequires-walletrequires-oauth-token
Capability Assessment
Purpose & Capability
The scripts do exactly what the name/description claim: fetch instructions from Google Sheets, cache them under the OpenClaw runtime directory, and reconcile cron job enabled flags. Required runtime (node) and the Google Sheets access are proportional to the stated purpose. However, the published registry metadata lists no required environment variables or primary credential while SKILL.md and the scripts clearly require GOOGLE_SHEETS_SPREADSHEET_ID and either service-account credentials or a gcloud token — this mismatch is an inconsistency in the package metadata.
Instruction Scope
SKILL.md and the included scripts are explicit about what they do: call Google Sheets APIs, write JSON/MD cache files, and update a local cron jobs.json (with timestamped backups in apply mode). The loader falls back to cached files when network/auth is unavailable and may shell out to gcloud to obtain an access token. No code attempts to read unrelated system config or post data to unexpected external endpoints beyond Google APIs. Minor scope difference: reconcile-cron requires service-account creds (no gcloud fallback), while load-sheet-instructions supports either — this should be documented clearly to avoid runtime surprises.
Install Mechanism
This is instruction-only with included Node scripts and no install spec. Nothing is automatically downloaded or executed during install; the user must run the scripts with node. That limits supply-chain risk compared with an arbitrary remote install, but users will execute the local scripts, so review before running is recommended.
Credentials
The scripts legitimately require GOOGLE_SHEETS_SPREADSHEET_ID and either GOOGLE_SERVICE_ACCOUNT_EMAIL / GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY or a gcloud-authenticated token. These environment variables are sensitive (private key) but are proportionate to accessing spreadsheets. The registry metadata's omission of these required env variables and the 'primary credential: none' field is misleading and reduces transparency. Also note the scripts write to and modify the local jobs.json (default ~/.openclaw/cron/jobs.json) — that file access is required for the reconcile task but is a privileged local change you should permit intentionally.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes its own cache files and, when run with --apply, modifies the OpenClaw jobs.json (and creates a timestamped backup). This behavior is aligned with the control-plane purpose and does not alter other skills or system-wide agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install runtime-instructions-control-plane
  3. After installation, invoke the skill by name or use /runtime-instructions-control-plane
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release: Google Sheets runtime-instructions loader + cron enablement reconciler with local cache fallback and configurable paths.
Metadata
Slug runtime-instructions-control-plane
Version 0.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Runtime Instructions Control Plane?

Load per-job runtime instructions from Google Sheets, cache them locally, and reconcile cron job enablement flags safely for OpenClaw operations. It is an AI Agent Skill for Claude Code / OpenClaw, with 88 downloads so far.

How do I install Runtime Instructions Control Plane?

Run "/install runtime-instructions-control-plane" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Runtime Instructions Control Plane free?

Yes, Runtime Instructions Control Plane is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Runtime Instructions Control Plane support?

Runtime Instructions Control Plane is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Runtime Instructions Control Plane?

It is built and maintained by Daniel Sinewe (@danielsinewe); the current version is v0.1.0.

💬 Comments