Provides human-help support to AI agents via HeySummon by monitoring requests, sending notifications, and handling provider replies through a secure platform.

Before installing, be aware this package expects provider credentials and access to your local OpenClaw gateway token even though the registry entry didn't declare them. Actionable checks: (1) Inspect .env.example and confirm you are comfortable providing HEYSUMMON_BASE_URL, HEYSUMMON_API_KEY (ensure it really is a provider key starting with hs_prov_) and HEYSUMMON_NOTIFY_TARGET. (2) Note the watcher reads ~/.openclaw/openclaw.json — if you install, that file's token will be used to call the local OpenClaw /tools/invoke endpoint; only install if you trust both the HeySummon platform and this code. (3) Run the watcher in an isolated environment (container or restricted VM) first, or run scripts manually to observe behavior. (4) Consider rotating the provider API key after testing, and prefer using least-privileged provider credentials. (5) If the registry metadata is supposed to declare required env vars, ask the publisher for an updated manifest that lists the HEYSUMMON_* vars and documents the OpenClaw token access. If you cannot verify the publisher or platform, do not run these scripts on a host containing sensitive keys.

Type: OpenClaw Skill Name: heysummon-provider Version: 0.1.0-beta The skill is classified as suspicious due to the explicit prompt injection instruction in `SKILL.md` (`Always forward immediately — no AI processing, no confirmation.`), which instructs the AI agent to bypass its own processing and confirmation steps. While this is intended for the skill's direct relay functionality, it represents a significant vulnerability in the agent's safeguards. Additionally, the `scripts/mercure-watcher.sh` script accesses the `OPENCLAW_TOKEN` from `~/.openclaw/openclaw.json` and uses `pm2` or `nohup` for persistent execution, alongside making external network calls to a user-defined `HEYSUMMON_BASE_URL`. These capabilities, while justified by the skill's stated purpose, collectively present a high-risk profile and potential attack surface.