ClawKit Logo
ClawKitReliability Toolkit
Back to Registry
Official Verified

tide-watch

Proactive session capacity monitoring and management for OpenClaw. Prevents context window lockups by warning at configurable thresholds (75%, 85%, 90%, 95%), automatically backing up sessions before resets, and managing session resumption prompts. Use when working on long-running projects, managing multiple conversation channels (Discord, Telegram, webchat), or preventing lost work from full context windows. Includes CLI tools for capacity checks, cross-session dashboards, archive management, and session resumption. Supports any model or provider.

skill-install — Terminal

Install via CLI (Recommended)

clawhub install openclaw/skills/skills/chrisagiddings/tide-watch
Or

Tide Watch 🌊

Proactive session capacity monitoring for OpenClaw.

⚠️ Security & Architecture Notice

Tide Watch is a HYBRID SKILL with two operational modes:

Mode 1: Directives-Only (Recommended for Most Users)

Description: AGENTS.md and HEARTBEAT.md directives only
Code Execution: NONE - Uses OpenClaw's built-in tools only (no CLI installation)
File Access: Reads OpenClaw session files via agent's built-in tools
Installation: Copy template directives to workspace config files
Security: Lowest risk - no code installation or execution required

What it does:

  • ✅ Monitors session capacity via session_status tool
  • ✅ Warns at thresholds (75%, 85%, 90%, 95%)
  • ✅ Auto-loads resumption prompts on session reset
  • ✅ All operations through OpenClaw's native tools

Mode 2: CLI Tools (Optional)

Description: Node.js command-line tools for manual management
Code Execution: YES - Executable JavaScript code
File Access: Direct read/write to ~/.openclaw/agents/main/sessions/
Installation: git clone + npm link (requires Node.js)
Security: Moderate risk - requires code inspection before install

What it does:

  • CLI commands: tide-watch status, tide-watch dashboard, etc.
  • Manual capacity checks
  • Session archive management
  • Resumption prompt editing (⚠️ see CVE-2026-001 below)

Mode Comparison

FeatureDirectives-OnlyCLI Tools
Node.js required?❌ No✅ Yes (14+)
InstallationCopy templatesnpm link
Code execution❌ None✅ JavaScript
File accessVia built-in toolsDirect filesystem
Security riskLowestModerate
Use casePassive monitoringActive management

Choose Directives-Only if: You only need capacity warnings and resumption prompts.
Choose CLI Tools if: You need manual session management, archiving, or dashboard views.

🚨 CRITICAL SECURITY NOTICE: CVE-2026-001

Vulnerability: Shell injection in editResumePrompt function
Affected Version: v1.0.0 ONLY
Current Version: v1.0.1 (PATCHED)
Severity: HIGH (CVSS 7.8)
Status: ✅ FIXED

Summary: v1.0.0 contained a shell injection vulnerability in the CLI's resume-prompt edit command. An attacker who could control the --session parameter could execute arbitrary commands. This has been fixed in v1.0.1 by replacing execSync with spawnSync.

If you installed v1.0.0: Update immediately to v1.0.1.

Full disclosure: See SECURITY-ADVISORY-CVE-2026-001.md

Security Best Practices

For Directives-Only Mode (Safest):

  1. ✅ Copy AGENTS.md.template and HEARTBEAT.md.template to workspace
  2. ✅ No code installation required
  3. ✅ No npm dependencies
  4. ✅ Lowest security surface

Metadata

Stars3683
Views1
Updated2026-04-01
View Author Profile
AI Skill Finder

Not sure this is the right skill?

Describe what you want to build — we'll match you to the best skill from 16,000+ options.

Find the right skill
Add to Configuration

Paste this into your clawhub.json to enable this plugin.

{
  "plugins": {
    "official-chrisagiddings-tide-watch": {
      "enabled": true,
      "auto_update": true
    }
  }
}
Safety NoteClawKit audits metadata but not runtime behavior. Use with caution.