跳到主要内容
知仓学习社ZHICANG

skillopt-sleep

Reference-only OpenClaw adaptation of SkillOpt-Sleep. Use it to study or port the contributed DeepSeek wrapper, not as a ready-to-run installation.

读凭据执行命令联网写文件严重 5 · 高危 3microsoft/SkillOpt

它会碰到什么

扫了多少10 个文本文件,56 KB
它会碰到什么读凭据执行命令联网写文件
命中总数21 处
命中统计严重 5 · 高 3 · 中 11 · 低 2
逐条看命中(8 条严重或高危)
  • 严重 run_sleep_cron.sh:43cred-paths
    if ! grep -q "DEEPSEEK_API_KEY=" "$HOME/.openclaw/.env" 2>/dev/null; then
  • 严重 run_sleep_cron.sh:44cred-paths
    echo "ERROR: DEEPSEEK_API_KEY not found in ~/.openclaw/.env" | tee -a "$LOG_FILE"
  • 严重 skillopt_sleep_openclaw.py:32cred-paths
    # try loading from .env
  • 严重 skillopt_sleep_openclaw.py:33cred-paths
    env_path = os.path.expanduser("~/.openclaw/.env")
  • 严重 tests/wiki-tasks.json:55instruction-harmful-additive
    "reference": "Index rebuilt: 14 wiki pages registered in _index.md (was 12 \u2014 added competitor-pricing-rev2 and citations-q2-2026).\nQuestion for Ethan: sho
  • skillopt_sleep_openclaw.py:30cred-envread
    api_key = os.environ.get("DEEPSEEK_API_KEY", "")
  • skillopt_sleep_openclaw.py:41cred-envread
    base = os.environ.get("DEEPSEEK_BASE_URL", "https://api.deepseek.com/v1")
  • slash_sleep.py:107exec-spawn
    rc = os.system(" ".join(f'"{c}"' for c in cmd))

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

SkillOpt-Sleep OpenClaw reference adaptation

This directory is a contributed reference, not a supported, plug-and-play

OpenClaw integration. It illustrates one way to connect the shared

skillopt_sleep cycle to a custom DeepSeek Chat Completions backend and a set of

environment-specific task fixtures.

Do not run or schedule the files unchanged. Several scripts and the sample

configuration preserve assumptions from the contributor's original machine,

and parts of the wrapper have not yet been ported to the current shared-engine

interfaces. Start with the directory's [README.md](README.md), which is the

authoritative status and adaptation guide.

What is included

  • skillopt_sleep_openclaw.py — a contributed DeepSeek backend prototype. It

also contains an Ollama embedding helper, but that helper is not wired into

the current shared sleep cycle.

  • run_sleep.py — a custom cycle wrapper with environment-specific paths and a

backend-registration shim.

  • slash_sleep.py — an experimental command helper written for an older

staging-manifest shape.

  • run_sleep_cron.sh — a machine-specific category runner, not a portable cron

installer.

  • config.json — a sample configuration, not a set of guaranteed or enforced

runtime limits.

  • tests/*.json — example task fixtures from one environment, not a universal

OpenClaw benchmark.

Known porting gaps

Before treating this as an integration, a maintainer must at least:

  1. Replace every absolute workspace, repository, state, skill, log, and task

path with explicit user configuration.

  1. Update the custom backend factory to the current get_backend call contract,

including the project directory, and update its backend methods and edit

records to the current protocol.

  1. Replace the experimental adoption logic with the current staging manifest

and skillopt_sleep.staging.adopt behavior. Current staging artifacts use

proposed_SKILL.md / proposed_CLAUDE.md, manifest.json, and report files;

they do not expose the old manifest.proposed_skill field.

  1. Decide how real OpenClaw transcripts are converted into a supported session

format. Pointing claude_home at an arbitrary agent directory does not by

itself make its files Claude Code-compatible JSONL.

  1. Build scheduling around the adapted wrapper. The shared scheduler launches

the shared CLI; it does not automatically preserve this custom backend or

its category task-file flow.

  1. Add isolated end-to-end tests for dry-run, accepted/rejected gates, staging,

adoption and backup, credential failure, and scheduled execution.

Until those gaps are resolved, use the supported shared

python -m skillopt_sleep CLI with --backend mock to test SkillOpt-Sleep itself,

and treat this directory only as source material for a future OpenClaw port.

Shared-engine features are not wrapper features

At this revision the supported shared CLI backends are mock, claude,

codex, copilot, handoff, and azure_openai; the

[plugin integration reference](../README.md#supported-cli-surface) is the

authoritative list. The shared engine can consolidate a selected skill and

project CLAUDE.md memory (controlled by evolve_skill and evolve_memory),

and its schedule / unschedule actions manage shared-engine cron entries.

Those capabilities do not make the custom OpenClaw wrapper portable: the

shared scheduler will not invoke the prototype backend or its category

fixtures. Use the shared documentation for those features, not this reference

SKILL.

Data and credential boundary

The prototype DeepSeek backend sends task, skill, memory, response, rubric, and

reflection content to its configured Chat Completions endpoint. Its source also

contains a helper that can send text to an Ollama service if a future port wires

that helper into the cycle. Neither path should be assumed to remove every

secret or private detail.

Before any port is tested with real data:

  • use isolated, synthetic or explicitly reviewed task files;
  • replace sample business names, personal references, URLs, and machine paths;
  • load credentials through the operator's secret-management mechanism;
  • verify TLS and retention policy for every remote endpoint; and
  • inspect all staged artifacts before adoption.

The bundled fixtures are examples only. Their scores and any old cost estimates

do not establish effectiveness, safety, or a stable nightly price for another

OpenClaw deployment.

Further information

  • [OpenClaw README](README.md) — current reference status and adaptation checklist
  • [plugin integration reference](../README.md) — supported shared-engine CLI

surface and data boundary

  • [SkillOpt-Sleep documentation](../../docs/sleep/README.md) — concepts,

results, and limitations

Contributions that turn this reference into a portable integration should add

tests and update all three documents together.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 17,158
本站分层T1
该仓技能数5
原文件路径plugins/openclaw/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 5 个技能

同名技能的其他版本

有 5 个不同仓库或目录里都有叫 skillopt-sleep 的技能。它们内容并不相同,别混用:

  • microsoft/SkillOpt — Use when the user wants their Claude agent to self-improve from past usage, asks about a n
  • microsoft/SkillOpt — Use when the user wants Codex to self-improve from past usage, asks about a nightly/offlin
  • microsoft/SkillOpt — Use when the user wants Cursor to learn from recent local sessions, asks for an offline sl
  • microsoft/SkillOpt — Use when the user wants the dsh agent to self-improve from past usage, asks about a nightl