ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      kennyzir

      Safety Report

      btw command

      @kennyzir

      Ask non-blocking clarifying questions during agent workflows. Use when agents need user input without halting execution. Handles deployment decisions, code r...

      105Downloads
      0Installs
      0Stars
      1Versions
      Workflow Automation8,822DevOps & Infrastructure2,137

      Security Analysis

      medium confidence
      Suspicious0.04 risk

      The skill is local and contains only in-memory question-queue code (no external network or credentials), but its README/usage claims non-blocking, multi-channel notifications and durable queuing that the included implementation does not provide — this mismatch is a design/incoherence issue you should understand before installing.

      Mar 27, 20262 files3 concerns
      Purpose & Capabilityconcern

      The skill's stated purpose is to provide non-blocking, queued questions with notifications via multiple channels. The code implements a simple in-memory queue and console logging only (no notification channels, no persistence). The required capabilities (none) are appropriate, but the feature claims (multi-channel notifications, durable queue) are not implemented in handler.ts.

      Instruction Scopeconcern

      SKILL.md emphasizes non-blocking behavior ('agent continues working while waiting') and gives examples that imply background queuing. The implementation's run() awaits waitForAnswer, which blocks until an answer or timeout, so calling agent.run('btw', ...) will block the caller unless invoked without awaiting. SKILL.md also suggests notifying users through channels; the code only logs to console. This mismatch could lead to incorrect integration assumptions (e.g., relying on non-blocking semantics or persistence).

      Install Mechanismok

      No install spec and only a single small TypeScript handler are included; nothing is downloaded or written during install. This is low-risk from an installation/execution standpoint.

      Credentialsok

      The skill requests no environment variables, no credentials, and the code does not read env vars or config paths. That is proportional to its described local utility.

      Persistence & Privilegenote

      The skill does not request persistent presence (always:false) and runs locally. However, it stores questions only in memory — pending questions will be lost on process restart — which is not highlighted in the documentation and may be important for real-world use (especially for deployment/security prompts).

      Guidance

      This skill appears to be low-risk code that runs locally (no network calls or credentials), but the documentation and implementation are not fully aligned. Before installing or using it in production: - Understand blocking behavior: run() waits until an answer or timeout. If you need true non-blocking behavior, you must call it without awaiting or change the integration to poll listPendingQuestions and call answerQuestion later. The examples in SKILL.md can be misleading. - Notifications and durability are not implemented: the README mentions multi-channel notifications and persistent queuing, but the handler only logs to console and keeps questions in memory. If you need notifications or persistence across restarts, you'll need to extend the skill or provide external plumbing. - Test in a safe environment: because blocking behavior could pause agent workflows or deployment tasks until timeout, validate workflows in staging before relying on this for critical decisions. - The skill exposes answerQuestion() and listPendingQuestions() which you can use to implement your own UI/notification integration; consider adding secure persistence and notification hooks if you intend to use this for security- or deployment-critical prompts. Overall: not malicious, but the documentation over-promises features that aren't implemented; treat this as an incomplete/local helper and verify behavior before trusting it in important flows.

      Latest Release

      v1.0.0

      btw-command v1.0.0 - Initial release of the btw Command skill. - Enables agents to ask non-blocking clarifying questions during workflows, with timeout defaults and priority levels. - Supports use cases like deployment confirmations, code review approvals, data validation, and security checks. - Offers configurable options, default answers, timeout settings, and context support. - Works entirely locally (no external API), ensuring privacy and no dependency on internet access. - Includes integration examples for OpenClaw, LangChain, and custom agents.

      More by @kennyzir

      Capability Evolver

      20 stars

      SEO Backlink Submitter

      0 stars

      SEO Autopilot Pro

      0 stars

      Skill Router Pro

      0 stars

      exa search

      0 stars

      validate email

      0 stars

      Published by @kennyzir on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]