Org Learning Ops Skill

全量会话分析 + 每日技能盘点分配 + CEO学习日报与热门skills雷达联动输出。

This skill intends to analyze all agent conversations and agent configurations to produce daily learning/skills reports — which requires broad access to local session logs and config files that can contain sensitive text and possibly credentials. Before installing or enabling it: 1) Confirm where outputs/reports are stored and who they are sent to; ensure no external exfiltration endpoints are used without explicit approval. 2) Require explicit consent and an approved governance process for reading user/agent session logs. 3) Ask the author to document data minimization: which fields are read, how PII is redacted, retention policy, and how config files are sanitized to avoid exposing tokens. 4) Run the skill in a restricted sandbox (or on a copy of logs) first and review sample outputs. 5) If the skill will query private GitHub/registries, require explicit credentials/configuration and an approval workflow. These steps reduce privacy and credential exposure risks. Additional information that would raise confidence to 'benign': explicit handling of sensitive fields, an allowed-operations list, destination(s) for reports, and a minimal-permission runtime manifest.

Type: OpenClaw Skill Name: org-learning-ops-skill Version: 1.0.1 The skill is designed for operational analysis and governance of OpenClaw agents and skills. It requires access to sensitive session history files (`~/.openclaw/agents/*/sessions/*.jsonl`) and agent configurations, which is explicitly stated in `SKILL.md` and directly aligned with its stated purpose of 'full session analysis' and 'skill inventory'. Crucially, `SKILL.md` includes strong governance instructions for the AI agent, explicitly stating that 'installation/update skill, configuration change, formal activation' and handling of 'suspicious skills' all 'require approval'. There is no evidence of intent to exfiltrate data, execute arbitrary commands, or establish persistence, and the prompt instructions are clear and structured, mitigating prompt injection risks by enforcing human oversight for critical actions.