Runbook Automator

Convert manual incident runbooks into automated, executable playbooks. Parse existing runbooks, generate scripts for each step, add health checks, rollback p...

This skill appears to do what it claims but contains several omissions and safety risks. Before installing or using it: - Treat generated playbooks as potentially destructive: always review any generated script line-by-line before running, and prefer DRY_RUN=true for testing. - Expect it to try to send notifications to Slack/PagerDuty if SLACK_WEBHOOK or PAGERDUTY_KEY are present in your environment — remove or isolate those env vars if you don't want test messages sent. - The skill references external services (Confluence, Google Docs) but doesn't declare required credentials; verify how the agent would access those sources and don't provide credentials unless you trust the skill. - Run the tool only in an isolated/test environment when first trying it; do not run on production hosts or with production credentials until you have validated generated scripts and rollback behavior. - Ask the publisher (or request in the registry) that the skill declare required env vars, list the external commands it intends to call (kubectl, curl, bc, etc.), and add explicit safety checks (require explicit user confirmation before any non-dry-run execution, sandboxing, and detection of destructive commands). - If you are uncomfortable with autonomous execution, restrict or disable automatic invocation for this skill in your agent configuration and require manual invocation/approval.

Type: OpenClaw Skill Name: runbook-automator Version: 1.0.0 The runbook-automator skill is designed to transform manual incident response documentation into executable bash scripts. It includes functionality for parsing text, auditing runbooks for gaps (using standard find/grep commands), and generating templates with built-in rollback and notification logic. The skill's behavior is transparent and aligns with its stated purpose, with no evidence of data exfiltration, malicious execution, or hidden prompt injection attacks.