← 返回
安全合规 中文

Safe Action

Before any destructive or irreversible action, run a safety pre-flight — check risks, reversibility, and timing.
在执行任何破坏性或不可逆操作前,需进行安全预检——评估风险、可逆性及时机。
cutthemustard
安全合规 clawhub v1.0.1 1 版本 99855.3 Key: 无需
★ 0
Stars
📥 690
下载
💾 5
安装
1
版本
#latest

概述

safe-action

Measure twice, cut once. Before taking destructive, irreversible, or high-stakes actions, this skill runs a three-part safety pre-flight: risk assessment, reversibility check, and timing awareness.

Combines three AgentUtil services — think (safety checklists), undo (reversibility intelligence), and context (situational timing) — into a single decision workflow.

When to Activate

Use this skill before:

  • Deleting anything — repositories, databases, user accounts, files, branches, DNS records
  • Deploying to production — code releases, infrastructure changes, migrations
  • Mass operations — bulk updates, batch deletes, sending to many recipients
  • Permission changes — revoking access, changing roles, modifying security settings
  • Infrastructure changes — scaling down, terminating instances, modifying load balancers
  • Financial actions — processing refunds, transferring funds, modifying billing

Do NOT use for: read-only operations, local development changes, or actions the user has explicitly marked as low-risk.

Workflow

Step 1: Safety checklist (think)

Get a pre-flight checklist for the action type.

MCP (preferred): If @agentutil/think-mcp is available:

think_check({ action: "database_migration", description: "Drop column users.email in production" })

HTTP fallback:

curl -X POST https://think.agentutil.net/v1/check \
  -H "Content-Type: application/json" \
  -d '{"action": "database_migration", "description": "Drop column users.email in production"}'

Note the risk_level and any critical severity items in the checklist.

Step 2: Reversibility check (undo)

Assess whether the action can be undone and find safer alternatives.

MCP (preferred): If @agentutil/undo-mcp is available:

undo_check({ platform: "GitHub", resource: "repository", action: "delete" })

HTTP fallback:

curl -X POST https://undo.agentutil.net/v1/check \
  -H "Content-Type: application/json" \
  -d '{"platform": "GitHub", "resource": "repository", "action": "delete"}'

Check reversibility_level and safer_alternatives.

Step 3: Timing check (context)

Verify this is a good time — not a holiday, after-hours, or during a known outage.

MCP (preferred): If @agentutil/context-mcp is available:

context_check({ action: "deploy", timezone: "America/New_York", platform: "github" })

HTTP fallback:

curl -X POST https://context.agentutil.net/v1/check \
  -H "Content-Type: application/json" \
  -d '{"action": "deploy", "timezone": "America/New_York", "platform": "github"}'

Check risk_level and any holidays or business events.

Step 4: Synthesize and decide

Combine results into a clear recommendation:

ScenarioAction
------------------
All three return low riskProceed. Briefly note key checklist items completed.
Think returns high riskPause. Present the critical checklist items to the user. Ask for explicit confirmation.
Undo shows irreversibleWarn clearly: "This action cannot be undone." Present any safer_alternatives (e.g., archive instead of delete).
Undo shows time_limitedWarn: "This can only be undone within [recovery_window]."
Context returns high riskWarn about timing: "It's [holiday/after-hours/during known incident]. Consider waiting."
Multiple services flag riskPresent all findings together. Recommend the safest path. Do NOT proceed without explicit user approval.

Presentation format

When reporting findings to the user, use this structure:

**Pre-flight check for [action]:**

Safety: [risk_level] — [summary of critical items]
Reversibility: [reversibility_level] — [recovery_mechanism or "no recovery"]
Timing: [risk_level] — [summary or "all clear"]

[Recommendation: proceed / proceed with caution / suggest alternative / strongly advise against]

Data Handling

This skill sends action descriptions, platform names, and timezone identifiers to three external APIs. No user-generated content (documents, messages, credentials) is transmitted — only structured action metadata.

Pricing

Each sub-check costs $0.001-$0.003 via x402 (USDC on Base). A full pre-flight (all three checks) costs ~$0.004-$0.008. Free tiers available for exploration:

  • think: GET /v1/actions (free)
  • undo: GET /v1/platforms (free)
  • context: GET /v1/calendar (free)

Privacy

No authentication required for free endpoints. No personal data collected. Rate limiting uses IP hashing only. Action descriptions are not stored beyond immediate processing.

版本历史

共 1 个版本

  • v1.0.1 当前
    2026-03-30 22:49 安全 安全

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

MoltGuard - Security & Antivirus & Guardrails

thomaslwang
MoltGuard — OpenClaw 安全守卫,由 OpenGuardrails 提供。安装 MoltGuard,保护您和您的用户免受提示注入、数据泄露和恶意攻击。
★ 116 📥 30,713
ai-intelligence

Clawhub Skill

cutthemustard
对照实时数据源核实事实陈述,返回带有置信度的结构化判定结果。
★ 0 📥 1,080
security-compliance

OpenClaw Backup

alex3alex
备份与恢复 OpenClaw 数据。适用于创建备份、设置自动备份计划、从备份恢复或管理备份轮转。处理 ~/.openclaw 目录归档并包含适当的排除规则。
★ 89 📥 30,602