← 返回 Skills 市场

deterministic-controller

Name: deterministic-controller
Author: variable190

作者 Dan · GitHub ↗ · v0.1.1

cross-platform ⚠ suspicious

736

总下载

当前安装

版本数

在 OpenClaw 中安装

/install deterministic-controller

功能描述

Deterministic, evidence-gated controller templates for OpenClaw enabling repeatable orchestration loops with heartbeat, cron poll, and sprint planning.

使用说明 (SKILL.md)

Deterministic Controller for OpenClaw (Docs-only)

USE WHEN

You want a deterministic, repeatable orchestration loop for OpenClaw (heartbeat + cron poll + subagents).
You want evidence-gated completion (no DONE without artifact paths).
You want a lean portfolio queue (ACTIVITIES.md) with external sprint-plan import via Plan Path.

DON'T USE WHEN

You want a turnkey, self-modifying installer that patches config / creates cron jobs automatically.
You need complex runtime code; this skill is templates + docs.

Outputs

Template files under this skill folder:
- templates/HEARTBEAT.md
- templates/ACTIVITIES.md
- templates/SPRINT_TEMPLATE.md
Copy/paste prompts:
- examples/setup_prompt.md
- examples/project_to_sprint_prompt.md
Cron payload text:
- docs/poll_cron_payload.txt
Config guidance:
- docs/openclaw_config_snippets.md

How to use

Start with the repo README:

README.md

Then copy templates into your workspace and set:

\x3CTELEGRAM_GROUP_ID> in HEARTBEAT.md
heartbeat prompt + cadence in openclaw.json (see docs/openclaw_config_snippets.md)

This skill intentionally does not execute commands or change config automatically.

安全使用建议

This skill is documentation-only and appears to do what it says, but it gives an agent the documented ability to read and update workspace files and to send control-plane logs to a Telegram group if you configure that. Before using or arming automation: (1) inspect AGENTS.md, IDENTITY.md, USER.md, SOUL.md, MEMORY.md and any files referenced as Evidence/Output for secrets or sensitive info; (2) perform manual dry runs (MANUAL_RECONCILE) and keep the poll cron disabled until you confirm behavior; (3) if you enable Telegram logging, only send minimal control-plane lines and use a dedicated group; (4) review and apply least-privilege allowlists for subagents/models. If you want, provide the exact workspace paths you plan to use and I can point out which files to sanitize or test steps to safely arm the controller.

功能分析

Type: OpenClaw Skill Name: deterministic-controller Version: 0.1.1 The skill bundle is designed to set up a deterministic control loop for an OpenClaw agent, involving powerful capabilities such as filesystem read/write, creating a cron job for persistence (explicitly disabled by default), spawning subagents, and network egress for control-plane logging to Telegram. While the skill includes strong prompt injection defenses and extensive security documentation (`SECURITY.md`) advising on secret hygiene and opt-in features, the broad read scope for `HEARTBEAT_TICK` (e.g., `USER.md`, `SOUL.md`, `MEMORY.md`) and explicit instructions for network egress to Telegram (`HEARTBEAT.md`) present significant attack surface and risk if the operator fails to follow security best practices. These capabilities, though documented and opt-in, elevate the risk beyond benign, classifying it as suspicious due to potential vulnerabilities rather than clear malicious intent.

能力评估

✓ Purpose & Capability

The skill declares itself as docs/templates-only and the files (HEARTBEAT.md, ACTIVITIES.md, SPRINT_TEMPLATE.md, prompts, and config snippets) match that purpose. The Telegram logging option and cron payload are coherent with a controller/observability use case.

ℹ Instruction Scope

Runtime docs instruct agents/operators to read and update workspace files (ACTIVITIES.md, HEARTBEAT.md, project plan files) and provide copy/paste prompts to perform those edits. The HEARTBEAT contract explicitly allows reading additional files (AGENTS.md, IDENTITY.md, USER.md, SOUL.md, MEMORY.md, daily memory files) when a full heartbeat is run — this is documented but expands the agent's read scope and should be reviewed before arming automation.

✓ Install Mechanism

No install spec or code is included; nothing will be downloaded or written by the skill itself. It's instruction-only, so there is no install-time execution risk.

ℹ Credentials

The skill requests no environment variables or credentials. However, its documented runtime reads workspace files that may contain sensitive data; the SECURITY.md appropriately calls this out and recommends secret hygiene. This read scope is explainable by the controller's needs but is a sensitive capability if misused.

ℹ Persistence & Privilege

The templates and example prompts instruct operators on creating a poll cron job and configuring heartbeat cadence, which can create persistent automation if the operator enables them. The repository emphasizes keeping the cron job disabled by default and not auto-enabling anything; that operator control mitigates privilege concerns but operators must follow the checklist before arming.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install deterministic-controller
安装完成后，直接呼叫该 Skill 的名称或使用 /deterministic-controller 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.1

Docs safety hardening: add SECURITY.md; clarify heartbeat full-refresh reads include memory; note Telegram logging is optional.

v0.1.0

Initial docs-only release (templates + prompts + cron payload + config snippets).

元数据

Slug deterministic-controller

版本 0.1.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题