PulseFlow

Maintain a Markdown task dashboard with append-only AI work logs, syncing daily AI DONE TODAY and weekly usage panels via heartbeat or on-demand refresh.

What to check before installing PulseFlow: - Review the code locally. The bundle includes many Node.js scripts that will read and write workspace files; inspect install_agent_log_rules.js, install_summary_crons.js, sync_ai_done.js, and rollover_now.js before running them. - Confirm runtime dependencies: Node.js is required and the scripts expect an 'openclaw' CLI available on PATH (scripts call 'openclaw gateway usage-cost'). The registry metadata did not declare this binary — provide and test the CLI in a sandboxed environment first. - Review and set config carefully: todo/system/config.json controls dashboardPath, historyDir, reportsDir and agentsFilePath. Ensure agentsFilePath does not point to any sensitive or system-level files because the skill will modify AGENTS.md to insert managed blocks. - Cron installation: install_summary_crons.js can create template-driven cron jobs or other delivery hooks; use --dry-run and inspect generated output before enabling. Prefer manual scheduling until you confirm behavior. - Credentials/usage access: querying usage via the 'openclaw' CLI will use whatever credentials that CLI is configured to use on the machine. If you don't want the skill to access live usage data, use AI_WORKLOG_USAGE_JSON to supply a local JSON file for testing. - Test in an isolated workspace first: run scripts/validate_system.js and try init_system.js / sync_ai_done.js against a temporary directory to observe what files are created/changed. Given the undeclared external CLI dependency and the script-driven file modifications, treat this bundle as functional but requiring careful review and controlled deployment.

Type: OpenClaw Skill Name: pulseflow Version: 1.2.1 PulseFlow is a task management and AI activity logging system designed for the OpenClaw environment. It automates the maintenance of a central dashboard (NOW.md) by aggregating append-only JSONL logs from various agents and fetching usage data via the 'openclaw' CLI. While the skill possesses significant capabilities—such as modifying other agents' configuration files (AGENTS.md) to inject logging rules and scheduling automated summary reports via 'openclaw cron'—these behaviors are explicitly documented, transparently implemented in the provided JavaScript scripts (e.g., scripts/install_agent_log_rules.js and scripts/install_summary_crons.js), and directly serve the stated purpose of the system. No evidence of data exfiltration, credential theft, or malicious prompt injection was found.