Foreman Pro

Digital construction foreman: crew management, work acceptance, work logs, hidden works acts, safety, schedules and executive documentation.

Summary of what to do before installing/using: - Inspect install.sh and test/smoke-test.sh before running: open them and search for network calls (curl/wget/ssh/git), file writes to system paths, or commands that escalate privileges. Run them in a sandbox/container or VM first. - Clarify Telegram integration: if you want TG notifications, ask the author where to put the bot token; ensure the token is stored in a config file you control and not hard-coded into scripts. Do not paste tokens into third-party forms. - Check for network endpoints and remote uploads in scripts: the package claims no external dependencies, but scripts may still phone home — verify any URL/IPs before running. - Verify provenance and license: source/homepage is unknown. Prefer packages from known vendors or request provenance (author contact, company site) and signed releases. - Backup and least-privilege: run initial installation under a non-privileged account and avoid sudo unless necessary. Backup any config/data before running installer. - If you cannot inspect scripts, treat this as untrusted: run in an isolated environment or decline installation until the developer provides a provenance and a walkthrough of install actions. If you want, I can: (1) review the contents of install.sh and test/smoke-test.sh for suspicious commands, (2) search the package for network calls or credential patterns, or (3) draft questions to ask the author about TG integration and origin.

Type: OpenClaw Skill Name: raai-foreman-pro Version: 3.5.4 The raai-foreman-pro skill bundle is a legitimate and highly detailed tool designed for construction project management. The shell scripts (install.sh, build.sh, and smoke-test.sh) perform standard installation, packaging, and validation tasks without any evidence of malicious behavior or unauthorized data access. The SKILL.md file contains extensive instructions and templates for an AI agent to act as a construction foreman, strictly adhering to Russian regulatory standards (SP, GOST, PUE). No indicators of data exfiltration, backdoors, or malicious prompt injection were found; the bundle appears well-documented and focused on its stated business purpose.