360 Secure SkillHub
360 安全技能中心

Agent Changelog

为 OpenClaw 工作区提供基于 git 的版本追踪:钩子捕获轮次间文件改动并归因到触发用户,提供 setup/status/log/diff/commit/restore/rollback 脚本及可选 GitHub、PromptLayer 同步,提交前需生成一行语义摘要。lint 提示指令存在相互矛盾的动作约束。

noambens
noambens
热度 53.73
最近更新 2026-05-18 11:43:17
分类:开发依赖:代码执行 / 读写文件 / 第三方 API / 内部调用大模型应用场景:DevOps / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agent-changelog
Metadata
name
agent-changelog
description
Advanced handling for agent-changelog requests (history, diffs, restores, rollbacks, snapshots) using git and OpenClaw scripts with clear, user-focused summaries and outputs.
user-invocable
true
metadata
{"openclaw":{"requires":{"bins":["git","jq","node"],"env":["OPENCLAW_WORKSPACE","OPENCLAW_CONFIG","PROMPTLAYER_API_KEY"]}}}

Agent Changelog

OpenClaw tracks workspace file changes between turns and attributes them to the user who triggered the change. Use this skill to answer history and diff questions and to apply controlled restores or rollbacks.

When To Use

Use this skill when the user asks about:

  • What changed, who changed it, or when it changed
  • Diffs between versions or commits
  • Rolling back or restoring files
  • Taking or inspecting snapshots or status
  • Setting up or verifying auto-versioning
  • Pulling a specific version or label from PromptLayer

Response Framework

  1. Clarify intent and scope.

    • Determine whether the user wants a quick summary or raw output.
    • Pin down file(s), time range, and commit identifiers if needed.
  2. Choose the evidence source.

    • Casual queries: use git to gather a compact view.
    • Explicit /agent-changelog invocations: run the matching script and return stdout verbatim.
  3. Present results clearly.

    • Summarize what changed, who triggered it, and the rough size.
    • Offer the next most likely action (diff, restore, rollback, or log).
  4. Handle destructive actions safely.

    • Always show what will change before a rollback or restore.
    • Prefer restore for single-file fixes; use rollback only when the user wants to revert everything.
    • If the target commit is ambiguous, ask a clarification question.
  5. Guide sync onboarding after setup.

    • After setup, proactively ask: "ok want help with github or promptlayer? (pick one)"
    • If yes, walk them through the chosen provider with no extra setup steps required on their side.
    • Confirm account status, credentials, and configuration for the selected provider.

Output Style

  • For summaries, keep it short and conversational.
  • For script-driven output, do not reformat or summarize; if onboarding guidance is needed, provide it after the raw output.
  • If an argument looks like a typo, confirm before running.

File Content Rules

Never embed attribution metadata inside file content. Do not add inline annotations like (updated by X on date), # changed by Y, status footnotes, or any other authorship/timestamp markers into the files you edit. Attribution belongs exclusively in the git commit message, which is handled automatically by the hooks and commit.sh. Files should contain only their actual content — clean, annotation-free.

Implementation Notes

  • Casual history or diff: use a small git window (last 5-10 commits) and include stat output.
  • Slash commands: use the scripts in setup.sh and scripts/ with the user-provided arguments.
  • Setup: run the setup script, then ask "ok want help with github or promptlayer?" and proceed if they confirm.
  • Restore or rollback: locate the commit via log, then perform the change after showing what will be modified.
  • Semantic summary: before every commit, run a quick diff and generate a sparse one-line summary of what changed and why (e.g. "added rate-limit rule to AGENTS.md, updated memory skill"). Always pass it via --summary and always include it in any history output presented to the user.
  • Log output: log.sh outputs raw structured data — present it conversationally based on what the user asked. Don't dump raw script output. Format each entry using the │-prefixed box style (same as status output), one entry per block.

Command Reference (Compact)

Use this only for explicit /agent-changelog invocations, and return stdout verbatim.

  • setup -> bash {baseDir}/setup.sh
  • setup follow-up -> Sync onboarding guidance (GitHub or PromptLayer)
  • status -> bash {baseDir}/scripts/status.sh
  • log -> bash {baseDir}/scripts/log.sh [count]
  • diff -> bash {baseDir}/scripts/diff.sh [commit] [commit2]
  • rollback -> bash {baseDir}/scripts/rollback.sh <commit> ["reason"]
  • restore -> bash {baseDir}/scripts/restore.sh <file> <commit> ["reason"]
  • commit (user-requested) -> bash {baseDir}/scripts/commit.sh --manual ["message"] [--summary "one-line semantic summary"]
  • commit (cron-triggered) -> bash {baseDir}/scripts/commit.sh [--summary "one-line semantic summary"]
  • pull from promptlayer -> node {baseDir}/scripts/pl-pull.js
  • pull from promptlayer version <n> -> node {baseDir}/scripts/pl-pull.js --version <n>
  • pull from promptlayer label <label> -> node {baseDir}/scripts/pl-pull.js --label <label>
  • pull from promptlayer version <n> reason <text> -> node {baseDir}/scripts/pl-pull.js --version <n> --reason "<text>"

Auto-Versioning Overview

Two hooks capture and commit changes between turns and attribute them to the active user. Defaults can be overridden via .agent-changelog.json.

Tracked by default: . (entire workspace). Secrets and runtime files are excluded via the .gitignore that setup creates — note that if a .gitignore already exists in the workspace, setup leaves it untouched, so ensure it covers secrets before enabling tracking.

To track a specific subset instead, edit <workspace>/.agent-changelog.json with a tracked array (this fully replaces the default):

{ "tracked": ["<file-or-folder>", "<file-or-folder>"] }

GitHub Onboarding (Setup Add-on)

Use this flow after setup to help users connect the workspace to GitHub. The user will need to authenticate (SSH key or HTTPS credential) — walk them through it step by step:

  1. Account and intent. Confirm they have a GitHub account and want this repo linked.
  2. Git identity. Ensure user.name and user.email are set for commits.
  3. Auth method. Offer SSH or HTTPS; proceed with their preference.
  4. Remote and verify. Ensure an origin remote exists and verify access.
  5. Enable sync. Set github.enabled = true in <workspace>/.agent-changelog.json to activate auto-push on each batch commit.
  6. Next action. Create or select the GitHub repo, then push or fetch as needed.

PromptLayer Onboarding (Setup Add-on)

Use this flow after setup to help users connect the workspace to PromptLayer. Keep it conversational like the GitHub flow and ensure they pick PromptLayer (not both).

  1. Intent. Confirm they want PromptLayer sync for this workspace.
  2. API key. Ask for the API key and set it as PROMPTLAYER_API_KEY in their environment (e.g. shell profile or OpenClaw env config). The scripts read it from the environment; do not write the raw key value into any config file.
  3. Collection choice. Ask whether to connect to an existing collection or create a new one.
  4. Dependency check. PromptLayer pulls require unzip (macOS/Linux) or PowerShell Expand-Archive (Windows).
  5. Config. Collection metadata (collectionId, skillName, provider) is stored in .agent-changelog.json in the workspace — the scripts handle this automatically. The only openclaw.json entry written is the SecretRef: skills.entries.agent-changelog.apiKey = { source: "env", provider: "default", id: "PROMPTLAYER_API_KEY" }.
  6. Connect.
    • Existing: run node {baseDir}/scripts/pl-pull.js --connect <name-or-id>
    • New: run node {baseDir}/scripts/pl-init.js after setting promptlayer.skillName
  7. Confirm. Verify the collection ID and explain that future batch commits sync to PromptLayer.