Ledger development tasks to Feishu Base via dev-task-ledger.sh. Write roots from ~/.openclaw/tasks-allowlist.json (per agent). Use on accept/confirm/close of coding/ops work; not for pure Q&A.
Drive the machine Chrome debug browser via OpenClaw-managed MCP (chrome-devtools). Use for page navigation, snapshots, screenshots, clicks, forms, console/network inspection — not for host shell risk.
Allowlisted development (wezdeck (+ optional team roots in local config)) under OpenClaw: wezdeck defaults to primary master; claw worktrees when parallel/isolation needed; 团队仓 still prefers claw-*; human/Claw rails (H1/H2, C1/C2/C3), ACP access layer.
Full error closed-loop for Dex (Main): diagnose, safe self-fix, verify, report; platform Exec failed handling; escalation with options. Load when handling failures or writing failure reports.
Host shell MUST go through claw-run (gate then exec). Three layers: rules → Grok re-check → human only if still danger. Prefer claw-run over bare exec.
Multi-role adversarial code review for allowlisted repos. Agent loads this skill and runs host scripts (find → refute → sandbox repro); humans only state intent (e.g. 审一下 / 对抗审查). Use when user asks for adversarial review, task acceptance recommends review, or runtime code changed before merge.
Multi-role adversarial code review for this repo. Agent loads this skill and runs host scripts (find → refute → sandbox repro). Humans only state intent (审一下 / 对抗审查). Use when user asks for adversarial review, acceptance recommends review, or runtime code changed before merge.
Thin pointer: OpenClaw agents must load workspace skill openclaw/workspace/skills/adversarial-review/SKILL.md and run host scripts themselves. Humans only state intent (审一下 / 对抗审查).