The Agent Skills Directory

[SAFE]: The skill serves a legitimate administrative purpose: monitoring and limiting the resource consumption (USD, time, and execution frequency) of other scheduled skills to prevent runaway costs.
[SAFE]: The Python script governor.py uses yaml.safe_load() for parsing its state file, which is a security best practice that prevents arbitrary code execution during deserialization.
[SAFE]: File system access is restricted to the skill's own state directory (~/.openclaw/skill-state/heartbeat-governor/), following standard patterns for stateful local agents.
[SAFE]: No network operations, credential handling, or external code downloads were detected in the source code or configuration files.

heartbeat-governor