← 返回 Skills 市场
Runtime Instructions Control Plane
作者
Daniel Sinewe
· GitHub ↗
· v0.1.0
· MIT-0
88
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install runtime-instructions-control-plane
功能描述
Load per-job runtime instructions from Google Sheets, cache them locally, and reconcile cron job enablement flags safely for OpenClaw operations.
安全使用建议
This package appears to do what it says, but pay attention before you run it: (1) The skill needs GOOGLE_SHEETS_SPREADSHEET_ID and authentication — either a Google service-account private key (GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY) or an authenticated gcloud CLI for token fallback. The registry metadata does not list these, so don't rely on the registry summary. (2) The reconcile script will modify your local OpenClaw cron jobs JSON (default ~/.openclaw/cron/jobs.json) — test with the dry-run first and keep backups. (3) If you provide a service account key, create a least-privilege account limited to sheets.readonly and restrict where the key is stored. (4) Review the included scripts before running and prefer running load-script in local-only mode for testing. If you need to proceed broadly, ask the publisher to correct the registry metadata to list required env vars and clarify the differing auth requirements between the two scripts.
功能分析
Type: OpenClaw Skill
Name: runtime-instructions-control-plane
Version: 0.1.0
The skill bundle provides a legitimate control plane for managing OpenClaw job instructions via Google Sheets. The scripts (load-sheet-instructions.mjs and reconcile-cron-from-sheet.mjs) implement standard OAuth2 JWT signing for Google Service Accounts and use gcloud CLI as a fallback for authentication. The code includes defensive features such as timestamped backups before modifying local configurations and a 'non-overridable' instruction block designed to prevent external sheet data from hijacking the agent's core constraints (a defense against prompt injection). No evidence of data exfiltration or unauthorized execution was found.
能力标签
能力评估
Purpose & Capability
The scripts do exactly what the name/description claim: fetch instructions from Google Sheets, cache them under the OpenClaw runtime directory, and reconcile cron job enabled flags. Required runtime (node) and the Google Sheets access are proportional to the stated purpose. However, the published registry metadata lists no required environment variables or primary credential while SKILL.md and the scripts clearly require GOOGLE_SHEETS_SPREADSHEET_ID and either service-account credentials or a gcloud token — this mismatch is an inconsistency in the package metadata.
Instruction Scope
SKILL.md and the included scripts are explicit about what they do: call Google Sheets APIs, write JSON/MD cache files, and update a local cron jobs.json (with timestamped backups in apply mode). The loader falls back to cached files when network/auth is unavailable and may shell out to gcloud to obtain an access token. No code attempts to read unrelated system config or post data to unexpected external endpoints beyond Google APIs. Minor scope difference: reconcile-cron requires service-account creds (no gcloud fallback), while load-sheet-instructions supports either — this should be documented clearly to avoid runtime surprises.
Install Mechanism
This is instruction-only with included Node scripts and no install spec. Nothing is automatically downloaded or executed during install; the user must run the scripts with node. That limits supply-chain risk compared with an arbitrary remote install, but users will execute the local scripts, so review before running is recommended.
Credentials
The scripts legitimately require GOOGLE_SHEETS_SPREADSHEET_ID and either GOOGLE_SERVICE_ACCOUNT_EMAIL / GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY or a gcloud-authenticated token. These environment variables are sensitive (private key) but are proportionate to accessing spreadsheets. The registry metadata's omission of these required env variables and the 'primary credential: none' field is misleading and reduces transparency. Also note the scripts write to and modify the local jobs.json (default ~/.openclaw/cron/jobs.json) — that file access is required for the reconcile task but is a privileged local change you should permit intentionally.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes its own cache files and, when run with --apply, modifies the OpenClaw jobs.json (and creates a timestamped backup). This behavior is aligned with the control-plane purpose and does not alter other skills or system-wide agent settings.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install runtime-instructions-control-plane - 安装完成后,直接呼叫该 Skill 的名称或使用
/runtime-instructions-control-plane触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release: Google Sheets runtime-instructions loader + cron enablement reconciler with local cache fallback and configurable paths.
元数据
常见问题
Runtime Instructions Control Plane 是什么?
Load per-job runtime instructions from Google Sheets, cache them locally, and reconcile cron job enablement flags safely for OpenClaw operations. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 88 次。
如何安装 Runtime Instructions Control Plane?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install runtime-instructions-control-plane」即可一键安装,无需额外配置。
Runtime Instructions Control Plane 是免费的吗?
是的,Runtime Instructions Control Plane 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Runtime Instructions Control Plane 支持哪些平台?
Runtime Instructions Control Plane 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Runtime Instructions Control Plane?
由 Daniel Sinewe(@danielsinewe)开发并维护,当前版本 v0.1.0。
推荐 Skills