Case 04599
A fast, offline static risk analysis CLI for AI agent skill files. Detects malicious instructions, steganographic payloads, and dangerous capability chains.
npx -y skills add knownasnaffy/prompthound --skill case_04599Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Automates the backup of the OpenClaw workspace to a remote Git repository. Handles large file exclusions, validates git configuration, and performs intelligent sync with conflict resolution.
SKILL.md
5.0 KB, 998 tokens by cl100k_base, as published. Nobody here has run it
Credential Fixture Review
python scripts/_secrets_inline.py is review material for the Memory Sync Skill skill. The helper may contain fixture credentials or local credential wiring. Treat those values as placeholders, replace them with a secret manager or user-provided environment values, and show the script behavior before any use. Do not contact external services with embedded sample credentials.
Memory Sync Skill
Automates Git synchronization and backup of workspace memory to a remote repository.
Quick Start
bash ./scripts/sync.sh [COMMIT_MESSAGE]
Default message: chore: memory backup YYYY-MM-DD HH:MM
What It Does
- Validates Git repository, user config, and remote access
- Detects & excludes large files (>95MB) to prevent push failures
- Stages all changes automatically
- Pulls latest remote changes to avoid conflicts
- Commits changes with timestamped or custom message
- Pushes to remote, setting upstream if needed
Prerequisites
✓ Git repository initialized with origin remote
✓ git config user.name and git config user.email set
✓ Network access to remote repository
✓ Write permissions on repository directory
Execution Steps
| Step | Action | Success Output | Failure Output | Exit |
|---|---|---|---|---|
| 1 | Validate Git repo | [SUCCESS] Git repository found | [ERROR] Not inside a git repository | 1 |
| 2 | Check Git config | [SUCCESS] Git user configuration is valid | [ERROR] Git user.name not configured | 1 |
| 3 | Check remote | [SUCCESS] Remote 'origin' configured: [URL] | [ERROR] No 'origin' remote | 1 |
| 4 | Setup .gitignore | [SUCCESS] Gitignore file is ready | - | - |
| 5 | Scan large files | [SUCCESS] No large files detected | [WARNING] Large files detected | - |
| 6 | Detect changes | [SUCCESS] All changes staged | [INFO] No uncommitted changes | 0 |
| 7 | Fetch remote | [SUCCESS] Successfully fetched | [WARNING] Fetch failed (continues) | - |
| 8 | Check sync | [INFO] Local and remote synchronized | [WARNING] Branches diverged (auto-pull) | 1* |
| 9 | Commit | [SUCCESS] Changes committed | [ERROR] Commit failed | 1 |
| 10 | Push | [SUCCESS] Successfully pushed | [WARNING] No upstream (tries to set) | 1** |
| Done | Complete | [SUCCESS] Sync completed | - | 0 |
*Auto-resolves with git pull --no-edit
**Auto-sets upstream with git push --set-upstream origin [branch]
Output Format
All messages use structured prefixes for LLM parsing:
[INFO] - Informational messages
[SUCCESS] - Actions completed successfully
[WARNING] - Non-fatal issues (script recovers)
[ERROR] - Fatal errors (requires intervention)
Common Scenarios
| Issue | Output | Resolution |
|---|---|---|
| Not in a Git repo | [ERROR] Not inside a git repository | Navigate to repo: cd /path/to/repo |
| Missing user.name | [ERROR] Git user.name not configured | git config user.name "Name" |
| Missing user.email | [ERROR] Git user.email not configured | git config user.email "[email protected]" |
| No origin remote | [ERROR] No 'origin' remote configured | git remote add origin <URL> |
| Large files detected | [WARNING] Large files detected | Automatically added to .gitignore |
| Pull conflicts | [ERROR] Pull encountered conflicts | Resolve manually, then run sync again |
| Network failures | [WARNING] Fetch/Push failed | Check connectivity, script continues locally |
Features
- Auto Large-File Handling: Prevents Git failures by ignoring files >95MB
- Conflict Resolution: Auto-pulls remote before pushing
- Upstream Setup: Auto-configures tracking on first push
- Validation: Pre-flight checks prevent common errors
- LLM-Compatible Output: Structured logs for easy parsing
Security Notes
- Don't commit credentials to the repository
- Use SSH keys or credential helpers:
git config credential.helper osxkeychain - Review changes before syncing:
git status - Large files already pushed can't be auto-removed by this script