Night Shift

Queue coding plans during the day, approve them, execute later in isolated worktrees, and inspect reports. Background agentic execution requires an explicitl...

This skill appears coherent with its purpose, but it's powerful: it will create git worktrees, run subprocesses (including arbitrary shell phases), commit changes, and optionally call model CLIs or send Telegram messages if you configure tokens. Before installing or running Night Shift: 1) inspect the included scripts (especially git_manager.py, executor.py, and any wrappers) and the SKILL.md; 2) run everything in an isolated/disposable workspace (OPENCLAW_WORKSPACE=/tmp/night-shift-demo) and use dry-run first; 3) be cautious about providing optional tokens (CURSOR_API_KEY, TELEGRAM_BOT_TOKEN) — only enable them if you trust the environment; 4) note that the skill attempts to chown/chmod worktrees and modifies global git safe.directory — run it under the intended service account and avoid running as root in a sensitive system; 5) approve plans manually and avoid approving high-risk production actions without explicit review.

Type: OpenClaw Skill Name: night-shift Version: 1.0.5 Night Shift is a comprehensive autonomous task-queueing and execution framework designed for engineering workflows. It manages a lifecycle of planning, user approval, and batch execution using git worktrees for isolation. While the skill possesses high-risk capabilities—including subprocess execution, filesystem modification, and global git configuration changes (scripts/git_manager.py)—these are strictly aligned with its stated purpose. Notably, the bundle includes proactive security measures, such as a command allowlist for verification steps and a content scanner (scripts/verifier.py) that checks for dangerous patterns like 'rm -rf /' or 'eval()'. No evidence of malicious intent, data exfiltration, or unauthorized persistence was found.