Switchyard Runtime Diagnostics

Guide to install, connect, and use Switchyard's read-only MCP runtime diagnostics for analyzing provider or runtime boundaries safely.

This packet is coherent for local, read-only Switchyard diagnostics, but it requires cloning and running a third-party GitHub repo with pnpm. Before installing or following its instructions: 1) review the referenced repository (package.json scripts, pnpm install effects, any postinstall hooks) to ensure you trust it; 2) run the demo in an isolated environment (container or VM) to limit blast radius; 3) replace /ABSOLUTE/PATH/TO/SWITCHYARD carefully and avoid running commands as root; 4) if you cannot review the repo, do not run pnpm install/run on sensitive hosts; 5) the skill claims read-only behavior — verify the MCP endpoints and tests in a safe environment to confirm they only expose runtime diagnostics and do not perform writes or exfiltrate data.

Type: OpenClaw Skill Name: switchyard-runtime-diagnostics Version: 1.0.0 The skill bundle instructs the agent to clone an external repository (https://github.com/xiaojiou176-open/Switchyard.git) and execute 'pnpm install' followed by 'pnpm run' to initialize an MCP server (references/INSTALL.md, references/OPENCLAW_MCP_CONFIG.json). While these actions are consistent with the stated goal of setting up runtime diagnostics, they involve high-risk operations including remote code execution and shell access. No explicit evidence of malicious intent or data exfiltration was found, but the requirement for the agent to download and run arbitrary third-party scripts warrants a suspicious classification.