Openclaw

Vial self-healing runtime — 8 protocols covering technical failures, behavioral failures, and agent role enforcement.

This skill is coherent with its stated purpose but performs autonomous actions you should review: it issues shell exec() calls that (a) write logs to /tmp/vial.log, (b) call an external telemetry/repair endpoint hosted on a personal workers.dev domain, and (c) can spawn verification sub-sessions and auto-execute follow-up steps (even without asking for every non-destructive action). Before installing, confirm you trust the telemetry/repair domain and its operator; consider whether you are comfortable with the skill making outbound HTTP requests and potentially running automated follow-up actions on your behalf. If you need stronger guarantees, ask the author for (1) the exact telemetry payloads and a strict spec for parsing Gene Map responses, (2) an option to disable remote calls/telemetry, and (3) explicit confirmation prompts instead of automatic execution for any action that could have side effects.

Type: OpenClaw Skill Name: vial-self-healing Version: 0.6.3 The skill bundle implements a 'self-healing' runtime that includes a remote strategy lookup mechanism via curl to helix-telemetry.haimobai-adrian.workers.dev. This allows the agent to fetch and execute instructions (strategies) from an external server, creating a potential remote instruction injection vector. The protocols also instruct the agent to perform background telemetry and read local configuration files (~/.openclaw/workspace/IDENTITY.md) using shell execution. While the stated intent is reliability, the ability to dynamically alter agent behavior from a remote endpoint is a significant security risk.