Wolverine — Self-Healing Process Manager

Supervised self-healing process manager for OpenClaw. Wraps your gateway in a crash recovery loop — catches errors, diagnoses with AI, proposes fixes for rev...

This skill is plausible for self-healing OpenClaw but has real power (it edits code, runs commands, and installs an npm CLI). Before installing: 1) Verify the npm package and GitHub repo (publisher identity, recent commits, issues, and package contents). 2) Test in an isolated staging environment or container, not production. 3) Only provide the minimum API key needed (rotate keys and avoid sharing long-lived credentials). 4) Inspect or audit the installed package code (or pin to a vetted version) so you can confirm the claimed sandboxing, secret-redaction, and protected-path behavior. 5) Be aware SKILL.md references OPENAI_API_KEY even though it isn’t declared — ask the publisher whether that variable is required and what it’s used for. If you lack the ability to audit the package, treat this as higher risk and avoid deploying it against sensitive environments.

Type: OpenClaw Skill Name: wolverine-ai Version: 1.0.2 The skill implements a 'self-healing' mechanism that uses AI to automatically diagnose crashes and modify source code. This architecture is inherently high-risk as it creates a significant surface for indirect prompt injection, where an attacker could trigger specific error logs to trick the AI into 'fixing' the code with a backdoor. While SKILL.md describes extensive security features (Code Guard, Secret Redactor, and Sandboxing), the core functionality of automated code modification and execution of an external npm package (wolverine-ai) represents a major security risk in an agentic environment.