Ops Skills Pack

Provides production-ready autonomous agent operations with cost optimization, task autonomy, persistent memory, security, and scheduled execution workflows.

What to check before installing: - Review the .md files locally before copying them into ~/.openclaw/workspace. The package is documentation-heavy: copying without review gives your agent new behavior and persistent files immediately. - Do not store secrets, API keys, or passwords in USER.md, MEMORY.md, STATE.md or similar workspace files. Treat these as plaintext agent-visible memory. - The docs reference commercial models (Anthropic, OpenRouter). Using those models will require provider API keys and may incur billing; the package does not request or configure those keys for you. - The package suggests commands like 'openclaw doctor --deep --fix --yes' and 'openclaw security audit --fix' — automatic '--fix' actions can change agent/system state. Run audits in dry-run or review mode first. - The pack enables scheduled autonomous runs (cron). If you enable cron jobs, verify each cron message and the agent's scope-control/safety policies so background runs cannot make unwanted changes. - package.json references install/verify scripts but there are no scripts/JS files included. Avoid running npm install or the package scripts from this repo unless you inspect their contents; they may fail or be misleading. - Verify the repository/source and author: the repo URLs and placeholders are inconsistent in places. If provenance matters for your deployment, confirm the upstream source and review change history. - If you want to test safely: install to a sandbox OpenClaw workspace first (not your production workspace), disable automatic fixes, and monitor the first few overnight runs before trusting the pack in production.

Type: OpenClaw Skill Name: openclaw-ops-skills Version: 1.0.0 The OpenClaw Ops Skills Pack is a comprehensive and professionally documented set of 14 skills designed to enhance agent autonomy, cost-efficiency, and security. The bundle provides the agent with disciplined workflows (e.g., Build-Test-Document-Decide), strict operational boundaries, and defensive security instructions, such as explicitly forbidding access to sensitive directories like ~/.ssh and ~/.aws/credentials (found in security-hardening.md). While package.json references installation scripts not included in the provided files, the package's own distribution whitelist and the manual installation instructions (SKILL.md) suggest these are not intended for execution by the end-user. No indicators of malicious intent, data exfiltration, or harmful prompt injection were identified.