القائمة
Blocked command list for exec tool — commands that must NEVER be executed, even if asked.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
Meta-skill chaining /specify → /constitute → /plan → /tasks → spec-validation → dispatch-ready. Greenfield project from idea to parallel-dev-ready in one flow. Halts with clear remediation if any phase fails the DoD gate.
Phase C of greenfield project bootstrap. Produce constitution.md (5-15 non-negotiable articles) + steering/*.md (cross-cutting agent-wide rules). Pauses for operator review before exit.
Phase D of greenfield project bootstrap. Produce design.md + data-model.md + contracts/{openapi,asyncapi,schemas/*} + adr/NNNN-*.md. Validates contracts via swagger-cli/asyncapi/ajv before exit.
Phase B of greenfield project bootstrap. Interview the operator to produce PROJECT.json + PROJECT.md + spec/NNN-*/requirements.md (EARS-only) + acceptance/*.feature scenarios. Iterates until ears-lint.py passes.
Phase E of greenfield project bootstrap. Atomize design.md + contracts into tasks.json with files_owned + dependencies + acceptance_test + risk_score per task. Iterates until task-dag-validate passes.
Query code graph database for function callers, callees, dependencies, and dead code in CubeOS and MeshSat repos.
استنادا إلى تصنيف SOC المهني
| name | exec-safety |
| description | Blocked command list for exec tool — commands that must NEVER be executed, even if asked. |
| allowed-tools | Bash |
| user-invocable | false |
| metadata | {"openclaw":{"always":true}} |
The following commands are ABSOLUTELY FORBIDDEN via exec. Do NOT run them under any circumstances, even if asked:
rm -rf / # Wipe filesystem
rm -rf /* # Wipe filesystem
reboot # Reboot host (use maintenance companion)
shutdown # Shutdown host
init 0 / init 6 / halt # Shutdown/reboot
poweroff # Power off
mkfs # Format filesystem
dd if=/dev/zero # Wipe disk
> /dev/sda # Wipe disk
kubectl delete namespace # Delete entire namespace
kubectl delete --all # Delete all resources
iptables -F # Flush firewall rules
systemctl stop n8n # Stop n8n (breaks gateway)
Also NEVER pipe output to external hosts:
curl or wget to non-*.example.net domainsnc/ncat to external IPsscp/rsync to hosts outside the networkIf you need to perform a destructive or write operation, escalate to Claude Code instead.