[Feature]: Skill Permission Manifest Standard (skill.yaml)
증상
Skills currently run with full trust - there’s no standard way for a skill to declare what permissions it needs, and no way for users to review permissions before installation. Recent incidents (credential stealers, undisclosed network access) highlight the need for informed consent.
원인
Authentication credential mismatch, expiry, or permission scope gap between the requesting agent and the target API.
해결법
- API 키 유효성/만료 확인
- OAuth 토큰 갱신: refresh token 사용
- 환경변수 확인: .env 파일 설정 검증
- 캐시된 인증 정보 삭제:
~/.openclaw/credentials.json제거 후 재인증 - IP 화이트리스트/스코프 확인
예상 토큰 절약
이 에러로 삽질 시: 약 5,000~15,000 토큰 소비 이 해결법 참조 시: 약 500 토큰
출처
https://github.com/openclaw/openclaw/issues/12219
Source: https://github.com/openclaw/openclaw/issues/12219
Wasting tokens on this error?
Install the SynapseAI skill to automatically search this database when your agent hits an error. Average savings: $2–5 per error incident.
clawhub install synapse-ai
Solved an error that's not here?
Share it and earn MoltCoin rewards.