Momo f5d0c370d6 fix(security): warn on agent skill MCP boundary drift (#98352) ...

Summary:
- Merged fix(security): warn on agent skill MCP boundary drift after ClawSweeper review.

Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.

Validation:
- ClawSweeper review passed for head ab3c29ef4c.
- Required merge gates passed before the squash merge.

Prepared head SHA: ab3c29ef4c
Review: https://github.com/openclaw/openclaw/pull/98352#issuecomment-4850104358

Co-authored-by: momothemage <niuzhengnan@163.com>
Approved-by: momothemage

2026-07-01 03:56:28 +00:00

..

acp-agents-setup.md

fix: hide sessions_spawn timeout overrides

2026-06-02 06:09:02 -04:00

acp-agents.md

fix(acp): require owner for runtime controls (#97953)

2026-06-29 17:29:08 -07:00

agent-send.md

feat(cli): add --message-file to openclaw agent

2026-06-22 20:13:57 +08:00

apply-patch.md

…

brave-search.md

…

browser-control.md

docs(browser): clarify networkidle session support (#94020)

2026-06-19 11:53:07 +01:00

browser-linux-troubleshooting.md

…

browser-login.md

docs(tools): tighten minimax-search params and remove fictitious browser --target flag

2026-05-11 07:57:28 +08:00

browser-wsl2-windows-remote-cdp-troubleshooting.md

…

browser.md

docs(browser): clarify networkidle session support (#94020)

2026-06-19 11:53:07 +01:00

btw.md

feat: support /btw in CLI-backed sessions (#92669)

2026-06-13 19:36:53 +02:00

capability-cookbook.md

…

clawhub.md

…

code-execution.md

feat(xai): route OAuth login through device-code flow (#97249)

2026-06-27 10:02:57 -06:00

creating-skills.md

docs: update ClawHub skill route references

2026-06-22 22:27:57 -07:00

diffs.md

docs: clarify diffs language pack additions (#88865)

2026-05-31 19:24:45 -07:00

duckduckgo-search.md

Keep key-free web search providers opt-in (#93616)

2026-06-16 21:02:07 +08:00

elevated.md

…

exa-search.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

exec-approvals-advanced.md

fix(flock): bind allow-always to wrapped command (#93362)

2026-06-15 11:56:15 -07:00

exec-approvals.md

fix(exec): honor state dir approvals (#92056)

2026-06-11 09:30:56 +09:00

exec.md

feat(plugin-sdk): add extensible channel identity hook context (#91903)

2026-06-23 11:56:49 +08:00

firecrawl.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

gemini-search.md

Fix Gemini day freshness time range handling (#95682)

2026-06-23 14:19:25 +08:00

goal.md

feat: add core session goals (#87469)

2026-05-29 22:36:29 +02:00

grok-search.md

feat: add xai oauth web search and provider timeouts

2026-05-22 08:49:53 +01:00

image-generation.md

fix: expose OpenAI image quality and moderation CLI options (#94156)

2026-06-18 01:21:29 -06:00

index.md

docs: add Skill Workshop guide

2026-05-31 09:05:03 +01:00

kimi-search.md

…

llm-task.md

refactor: unify OpenAI provider identity

2026-05-30 11:48:41 +02:00

lobster.md

docs: reorganize tools automation nav (#80116)

2026-05-11 15:59:27 -07:00

loop-detection.md

fix: abort generic no-progress tool loops

2026-05-12 00:29:10 +08:00

media-overview.md

docs(microsoft-foundry): document MAI image support

2026-06-09 15:34:28 +09:00

minimax-search.md

docs(tools): tighten minimax-search params and remove fictitious browser --target flag

2026-05-11 07:57:28 +08:00

multi-agent-sandbox-tools.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

music-generation.md

fix: route media completions through requester agent (#88141)

2026-05-30 00:24:28 +02:00

ollama-search.md

Keep key-free web search providers opt-in (#93616)

2026-06-16 21:02:07 +08:00

parallel-search.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

pdf.md

feat: support encrypted PDF extraction (#87751)

2026-05-28 20:19:49 +01:00

permission-modes.md

docs: add permission modes page

2026-05-31 08:47:02 +01:00

perplexity-search.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

plugin.md

fix(plugins): make empty-allowlist actionable for new users (#78105)

2026-06-23 04:41:40 +00:00

reactions.md

fix(nextcloud-talk): dispatch react action so agents can send reactions (#70110) (#72348)

2026-05-18 18:54:44 +00:00

searxng-search.md

feat(plugins): externalize additional official plugins (#95683)

2026-06-22 16:12:51 +08:00

skill-workshop.md

fix: gate Skill Workshop symlink writes

2026-06-11 15:20:38 +01:00

skills-config.md

fix(security): warn on agent skill MCP boundary drift (#98352)

2026-07-01 03:56:28 +00:00

skills.md

fix(security): warn on agent skill MCP boundary drift (#98352)

2026-07-01 03:56:28 +00:00

slash-commands.md

fix(acp): require owner for runtime controls (#97953)

2026-06-29 17:29:08 -07:00

steer.md

fix(agents): simplify subagent completion handoff

2026-05-23 13:50:08 +01:00

subagents.md

fix: page sessions_history beyond truncated tails (#97101)

2026-06-27 15:30:49 -07:00

tavily.md

feat(plugins): externalize additional official plugins (#95683)

2026-06-22 16:12:51 +08:00

thinking.md

feat: forward-port fast talks auto mode (#85104)

2026-06-22 09:37:09 +08:00

tokenjuice.md

build(plugins): externalize tokenjuice

2026-05-29 21:00:29 +01:00

tool-search.md

Migrate Tool Search gateway E2E into QA Lab flow (#97478)

2026-06-28 18:16:15 -07:00

trajectory.md

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

tts.md

fix(xiaomi): support MiMo voicedesign TTS

2026-05-31 10:34:51 +01:00

video-generation.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

web-fetch.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

web.md

Fix Gemini day freshness time range handling (#95682)

2026-06-23 14:19:25 +08:00