Skip to content

docs: refresh v0.0.60 release notes#4879

Merged
miyoungc merged 5 commits into
mainfrom
docs/v0.0.60-release-notes
Jun 6, 2026
Merged

docs: refresh v0.0.60 release notes#4879
miyoungc merged 5 commits into
mainfrom
docs/v0.0.60-release-notes

Conversation

@miyoungc
Copy link
Copy Markdown
Collaborator

@miyoungc miyoungc commented Jun 6, 2026

Summary

  • Adds the v0.0.60 section to docs/about/release-notes.mdx using the dev announcement from discussion NemoClaw v0.0.60 is out #4877.
  • Fills the source-doc gaps found during release-prep review across inference, policy tiers, command behavior, security boundaries, Hermes dashboard/tooling, runtime context, and troubleshooting.
  • Refreshes generated agent skills under .agents/skills/ from the current Fern docs output and upgrades Fern from 5.44.3 to 5.45.0.

Source summary

Verification

  • python3 scripts/docs-to-skills.py docs/ .agents/skills/ --prefix nemoclaw-user --doc-platform fern-mdx
  • python3 scripts/docs-to-skills.py docs/ .agents/skills/ skills/ --prefix nemoclaw-user --doc-platform fern-mdx --dry-run
  • npm run docs
  • git diff --check
  • skip-term scan across docs/, .agents/skills/, and skills/
  • npm run build:cli
  • npm run typecheck:cli
  • Commit and pre-push hook suites, including markdownlint, gitleaks, env-var docs gate, docs-to-skills verification, and skills YAML tests

Summary by CodeRabbit

Release Notes

  • New Features

    • DeepSeek-V4-Flash now available as default inference model for DGX Station.
    • Hermes dashboard improved with dedicated port and OAuth-authenticated tool gateway selection.
    • Added weather and public-reference policy presets for expanded agent capabilities.
    • Enhanced Ollama model selection with GPU memory filtering and automatic retry for timeouts.
  • Bug Fixes

    • Improved policy tier validation to prevent invalid configurations.
    • Better sandbox cleanup scoping by port to prevent conflicts across deployments.
    • Added GPU patch failure recovery with automatic rollback.
  • Documentation

    • Expanded troubleshooting guides for inference, security, and sandbox lifecycle.
    • Added .dockerignore best practices for custom deployments.

@miyoungc miyoungc added v0.0.60 Release target area: docs Documentation, examples, guides, or docs build area: skills Skills, agent behaviors, prompts, or skill packaging labels Jun 6, 2026
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jun 6, 2026

Linter diff in the way? Review this PR in Change Stack to focus on meaningful changes and expand context only when needed.

Review Change Stack

📝 Walkthrough

Walkthrough

This PR updates NemoClaw documentation for v0.0.60, covering runtime context guidance, policy tier defaults, Hermes dashboard workflows, managed inference setup, command reference accuracy, and lifecycle/security clarifications across agent skills and public docs.

Changes

v0.0.60 documentation refresh across OpenClaw and Hermes

Layer / File(s) Summary
Release notes publication
.agents/skills/nemoclaw-user-overview/references/release-notes.md, docs/about/release-notes.mdx
v0.0.60 release notes section added with highlights covering runtime guidance, sandbox lifecycle, local inference, messaging enrollment/CLI, and policy/secret-handling improvements.
Get-started defaults and policy preset wording
.agents/skills/nemoclaw-user-get-started/SKILL.md, .agents/skills/nemoclaw-user-get-started/references/quickstart.mdx, docs/get-started/quickstart.mdx
Updated default sandbox policy to include weather preset when NEMOCLAW_POLICY_TIER is unset, and Hermes reference now states quickstart launches a dashboard alongside API endpoint.
Hermes dashboard-first quickstart flow
.agents/skills/nemoclaw-user-get-started/references/quickstart-hermes.md, docs/get-started/quickstart-hermes.mdx, docs/about/how-it-works.mdx
Reworked Hermes quickstart to center on dashboard access at port 18789, added OAuth wizard tool-gateway prompts with Hermes policy preset mapping, documented dashboard URL retrieval without OpenClaw #token= fragment, and clarified runtime context prepends as hidden system guidance.
Dockerfile build-context and .dockerignore guidance
.agents/skills/nemoclaw-user-deploy-remote/SKILL.md, .agents/skills/nemoclaw-user-deploy-remote/references/install-openclaw-plugins.md, .agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md, .agents/skills/nemoclaw-user-manage-sandboxes/references/install-plugins-hermes.md
Documents .dockerignore requirement next to plugin Dockerfile and clarifies NemoClaw's credential-like path exclusions override .dockerignore negations in staged build contexts.
Managed vLLM images, model defaults, and NIM multi-arch pulling
.agents/skills/nemoclaw-user-configure-inference/SKILL.md, .agents/skills/nemoclaw-user-configure-inference/references/inference-options.md, docs/inference/inference-options.mdx
Specifies stable NGC vLLM image nvcr.io/nvidia/vllm:26.05.post1-py3 for managed DGX Spark/Station, changes DGX Station default model to deepseek-ai/DeepSeek-V4-Flash, documents NIM multi-arch digest resolution and local retagging for Docker 29.x/containerd hosts.
Inference switching, multimodal onboarding, and tool-calling behavior
.agents/skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md, .agents/skills/nemoclaw-user-configure-inference/references/tool-calling-reliability.md, docs/inference/switch-inference-providers.mdx, docs/inference/tool-calling-reliability.mdx
Documents Hermes inference set patches to /sandbox/.hermes/config.yaml including API-family mode and OpenShell proxy API-key placeholder, multimodal interactive onboarding prompts for Text-only vs Text+Image, and Nemotron managed inference tool-search disabling.
Policy tiers, weather/public-reference presets, and tier validation
.agents/skills/nemoclaw-user-reference/references/network-policies.md, .agents/skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md, docs/reference/network-policies.mdx, docs/network-policy/integration-policy-examples.mdx
Updated balanced and open tiers to include weather and public-reference presets, non-interactive tier validation with early exit on invalid values, and added maintained integration preset examples with nemoclaw policy-add commands.
Commands reference updates for onboarding, selection, and runtime operations
.agents/skills/nemoclaw-user-reference/references/commands.md, docs/reference/commands.mdx, docs/reference/commands-nemohermes.mdx
Expanded command docs for policy tier validation, Dockerfile staging with .dockerignore and secret-safety exclusions, sandbox-name selection precedence (NEMOCLAW_SANDBOX_NAMENEMOCLAW_SANDBOXSANDBOX_NAME), doctor/dashboard-url/tunnel status behavior, inference-set patching, skill install mirroring, and environment variable tables including NEMOCLAW_HERMES_TOOL_GATEWAYS, NEMOCLAW_MINIMAL_BOOTSTRAP, and deepseek-v4-flash model slug.
Architecture docs: gateway ownership, Docker-driver behavior, and runtime-context guidance
.agents/skills/nemoclaw-user-reference/references/architecture.md, docs/reference/architecture.mdx
Clarified Linux package-managed gateway service authority detection, Docker-driver host-owned gateway behavior without legacy markers, and runtime-context prepending that includes sandbox/phase/policy summaries as hidden system guidance for agent failure classification.
Security policy: auto-pair allowlist, Hermes placeholders, and secret scanner coverage
.agents/skills/nemoclaw-user-configure-security/references/best-practices.md, .agents/skills/nemoclaw-user-configure-security/references/credential-storage.md, docs/security/best-practices.mdx, docs/security/credential-storage.mdx
Updated auto-pair allowlist to cover openclaw-control-ui and cli clientMode in operator.pairing/read/write scopes, clarified Hermes uses OpenShell resolver placeholders (not raw credentials) and rejects raw secret-shaped values, expanded memory secret scanner to detect sk-proj- and xapp- token patterns.
Sandbox lifecycle scoping, bootstrap control, and template mutability
.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md, .agents/skills/nemoclaw-user-manage-sandboxes/references/runtime-controls.md, docs/manage-sandboxes/lifecycle.mdx
Documented gateway/dashboard cleanup scoped by sandbox name and port (preventing cross-sandbox teardown), NEMOCLAW_MINIMAL_BOOTSTRAP=1 behavior for skipping default template seeding, and workspace template-seed mutability requiring re-onboarding.
Troubleshooting: NIM multi-arch, Ollama retry, permissions, GPU patch, and context-window fallback
.agents/skills/nemoclaw-user-reference/references/troubleshooting.md, docs/reference/troubleshooting.mdx
Added troubleshooting for NIM multi-arch digest resolution verification with docker manifest inspect, Ollama cold-load retry with 300-second budget, OpenClaw permission drift detection and host-side repair without rebuild, GPU patch reconnect rollback behavior, and Ollama context-window auto-raise to 16384 when NEMOCLAW_CONTEXT_WINDOW is unset.
Release-prep docs-to-skills refresh guidance
.agents/skills/nemoclaw-contributor-update-docs/SKILL.md
Clarified that root skills/ directory is refreshed separately and must not be included in docs-to-skills conversion command.
Fern API documentation config version update
fern/fern.config.json
Updated Fern version from 5.44.3 to 5.45.0.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

  • NVIDIA/NemoClaw#4870: Introduces NEMOCLAW_MINIMAL_BOOTSTRAP flag semantics for skipping default workspace template seeding at onboarding; this PR's documentation extends operator-facing runtime-controls guidance to match those new semantics.
  • NVIDIA/NemoClaw#4867: Updates DGX Station managed vLLM profile to use deepseek-ai/DeepSeek-V4-Flash and specifies the same stable NGC image tag nvcr.io/nvidia/vllm:26.05.post1-py3 that this PR documents.
  • NVIDIA/NemoClaw#4810: Switches DGX Spark to the same stable NGC vLLM image nvcr.io/nvidia/vllm:26.05.post1-py3 that this PR adds to the managed inference documentation.

Suggested labels

documentation, v0.0.60

Suggested reviewers

  • cv
  • prekshivyas

🐰 A rabbit hops through the docs with glee,
v0.0.60 now flows so naturally,
Dashboard dashboards, presets abound,
Context and clarity all around,
Release it with joy—the magic's found!

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the main purpose of the PR: updating documentation to add v0.0.60 release notes. It is concise, specific, and directly reflects the primary change across the extensive documentation updates included in the changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch docs/v0.0.60-release-notes

Comment @coderabbitai help to get the list of available commands and usage tips.

@miyoungc miyoungc added v0.0.61 Release target and removed v0.0.60 Release target labels Jun 6, 2026
@miyoungc miyoungc marked this pull request as draft June 6, 2026 00:15
@copy-pr-bot
Copy link
Copy Markdown

copy-pr-bot Bot commented Jun 6, 2026

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 6, 2026

E2E Advisor Recommendation

Required E2E: None
Optional E2E: None

Workflow run

Full advisor summary

E2E Recommendation Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E

  • None. No E2E is recommended because this PR only changes documentation, generated assistant skill guidance, and Fern docs configuration. The diff does not touch runtime TypeScript/Node CLI code, OpenClaw plugin code, blueprint or network-policy YAML assets, sandbox lifecycle implementation, credential handling implementation, inference routing implementation, deployment scripts, or workflow logic that could affect real user flows.

Optional E2E

  • None.

New E2E recommendations

  • None.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 6, 2026

E2E Scenario Advisor Recommendation

Required scenario E2E: None
Optional scenario E2E: None

Workflow run

Full scenario advisor summary

E2E Scenario Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required scenario E2E

  • None. Docs, generated agent-skill documentation, and Fern documentation configuration changes only; no changes under test/e2e-scenario, scenario workflows, scenario metadata, expected states, suite scripts, runtime, or scenario-relevant onboarding/install helper code.

Optional scenario E2E

  • None.

Relevant changed files

  • None.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 6, 2026

PR Review Advisor

Findings: 0 needs attention, 4 worth checking, 0 nice ideas
Since last review: 0 prior items resolved, 2 still apply, 1 new item found

Review findings

🛠️ Needs attention

  • None.

🔎 Worth checking

  • Source-of-truth review needed: docs-to-skills placeholder conversion for Hermes generated skills: The advisor marked localized patch analysis as needs_followup.
    • Recommendation: Identify the invalid state, source boundary, source-fix constraint, regression test, and removal condition before merging the localized behavior.
    • Evidence: `docs/manage-sandboxes/lifecycle.mdx` uses `$$nemoclaw`, `nemoclaw`, and `openshell`; `.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md` renders `nemoclaw`, `nemoclaw`, and `openshell`.
  • Source summary still names an unmodified messaging-channels page: The PR body maps feat(messaging): migrate enrollment to manifest hooks #4248 to `docs/manage-sandboxes/messaging-channels.mdx`, but that source page is still not part of this PR's changed files. Generated skill copies and release notes may mention messaging enrollment, but the claimed source-doc update is absent, so the source summary overstates what the diff changes.
  • Root skills refresh guidance still conflicts with checked-in generator examples (.agents/skills/nemoclaw-contributor-update-docs/SKILL.md:177): The updated contributor skill tells release-prep authors not to include root `skills/` as a `docs-to-skills.py` output target, but repository guidance still includes examples and validation commands that pass `skills/`. That leaves maintainers with two competing sources of truth for release-prep skill refreshes.
    • Recommendation: Update the remaining `scripts/docs-to-skills.py` usage examples and pre-commit verification guidance, or explicitly document that root `skills/` is permitted only for dry-run verification while `.agents/skills/` is the release-prep write target.
    • Evidence: Changed guidance uses `python3 scripts/docs-to-skills.py docs/ .agents/skills/ --prefix nemoclaw-user --doc-platform fern-mdx` and says not to update root `skills/`. Existing `scripts/docs-to-skills.py` Usage examples still show `docs/ .agents/skills/ skills/`, and `.pre-commit-config.yaml` still runs `python3 scripts/docs-to-skills.py docs/ .agents/skills/ skills/ ... --dry-run`.
  • Generated Hermes skill collapses the CLI boundary into duplicate `nemoclaw` names (.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md:22): The generated Hermes skill says the CLI Selection Guide explains the boundary between `nemoclaw`, `nemoclaw`, and `openshell`, which loses the intended distinction between the Hermes alias and the base NemoClaw CLI. This makes the generated skill less actionable for Hermes users.
    • Recommendation: Adjust the source text or docs-to-skills placeholder conversion so Hermes generated skills render the `$$nemoclaw` placeholder as `nemohermes` when contrasting it with `nemoclaw` and `openshell`.
    • Evidence: Source `docs/manage-sandboxes/lifecycle.mdx` uses `$$nemoclaw`, `nemoclaw`, and `openshell`; the generated `.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md` renders that as `nemoclaw`, `nemoclaw`, and `openshell`.

🌱 Nice ideas

  • None.
Consider writing more tests for
  • **Acceptance clause:** Fills the source-doc gaps found during release-prep review across inference, policy tiers, command behavior, security boundaries, Hermes dashboard/tooling, runtime context, and troubleshooting. — add test evidence or identify existing coverage. The patch touches source docs across inference, policies, commands, security, Hermes quickstart, runtime controls, architecture, and troubleshooting. One claimed source-doc gap remains partial because `feat(messaging): migrate enrollment to manifest hooks #4248 -> docs/manage-sandboxes/messaging-channels.mdx` is listed in the PR body but that source page is not changed.
  • **Acceptance clause:** feat(messaging): migrate enrollment to manifest hooks #4248 -> `docs/manage-sandboxes/messaging-channels.mdx`, `.agents/skills/`: Keeps messaging enrollment behavior aligned with manifest-hook implementation. — add test evidence or identify existing coverage. Generated skill files and release notes mention messaging enrollment behavior, but `docs/manage-sandboxes/messaging-channels.mdx` is not present in the changed file list.
  • **docs-to-skills placeholder conversion for Hermes generated skills** — Add a docs-to-skills regression that a Hermes generated skill renders `$$nemoclaw`, `nemoclaw`, and `openshell` as distinct CLI names, e.g. `nemohermes`, `nemoclaw`, and `openshell`.. `docs/manage-sandboxes/lifecycle.mdx` uses `$$nemoclaw`, `nemoclaw`, and `openshell`; `.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md` renders `nemoclaw`, `nemoclaw`, and `openshell`.
Since last review details

Current findings:

  • Source-of-truth review needed: docs-to-skills placeholder conversion for Hermes generated skills: The advisor marked localized patch analysis as needs_followup.
    • Recommendation: Identify the invalid state, source boundary, source-fix constraint, regression test, and removal condition before merging the localized behavior.
    • Evidence: `docs/manage-sandboxes/lifecycle.mdx` uses `$$nemoclaw`, `nemoclaw`, and `openshell`; `.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md` renders `nemoclaw`, `nemoclaw`, and `openshell`.
  • Source summary still names an unmodified messaging-channels page: The PR body maps feat(messaging): migrate enrollment to manifest hooks #4248 to `docs/manage-sandboxes/messaging-channels.mdx`, but that source page is still not part of this PR's changed files. Generated skill copies and release notes may mention messaging enrollment, but the claimed source-doc update is absent, so the source summary overstates what the diff changes.
  • Root skills refresh guidance still conflicts with checked-in generator examples (.agents/skills/nemoclaw-contributor-update-docs/SKILL.md:177): The updated contributor skill tells release-prep authors not to include root `skills/` as a `docs-to-skills.py` output target, but repository guidance still includes examples and validation commands that pass `skills/`. That leaves maintainers with two competing sources of truth for release-prep skill refreshes.
    • Recommendation: Update the remaining `scripts/docs-to-skills.py` usage examples and pre-commit verification guidance, or explicitly document that root `skills/` is permitted only for dry-run verification while `.agents/skills/` is the release-prep write target.
    • Evidence: Changed guidance uses `python3 scripts/docs-to-skills.py docs/ .agents/skills/ --prefix nemoclaw-user --doc-platform fern-mdx` and says not to update root `skills/`. Existing `scripts/docs-to-skills.py` Usage examples still show `docs/ .agents/skills/ skills/`, and `.pre-commit-config.yaml` still runs `python3 scripts/docs-to-skills.py docs/ .agents/skills/ skills/ ... --dry-run`.
  • Generated Hermes skill collapses the CLI boundary into duplicate `nemoclaw` names (.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md:22): The generated Hermes skill says the CLI Selection Guide explains the boundary between `nemoclaw`, `nemoclaw`, and `openshell`, which loses the intended distinction between the Hermes alias and the base NemoClaw CLI. This makes the generated skill less actionable for Hermes users.
    • Recommendation: Adjust the source text or docs-to-skills placeholder conversion so Hermes generated skills render the `$$nemoclaw` placeholder as `nemohermes` when contrasting it with `nemoclaw` and `openshell`.
    • Evidence: Source `docs/manage-sandboxes/lifecycle.mdx` uses `$$nemoclaw`, `nemoclaw`, and `openshell`; the generated `.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md` renders that as `nemoclaw`, `nemoclaw`, and `openshell`.

Workflow run details

This is an automated advisory review. A human maintainer must make the final merge decision.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 6, 2026

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note

Due to the large number of review comments, Critical severity comments were prioritized as inline comments.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (26)
skills/nemoclaw-user-configure-security/SKILL.md (1)

1-6: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header to this Markdown file.

This file is missing the mandated Markdown SPDX header comment block.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-security/SKILL.md` around lines 1 - 6, The
SKILL.md for "nemoclaw-user-configure-security" is missing the required SPDX
header; add the SPDX license identifier comment block at the top of SKILL.md
(matching the declared license "Apache-2.0") so the file includes the mandated
SPDX header comment; update the header immediately above the existing YAML
frontmatter to ensure automated tooling recognizes the SPDX metadata for this
skill.

Source: Coding guidelines

skills/nemoclaw-user-manage-policy/references/approve-network-requests.md (1)

1-3: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Restore the required SPDX header in this Markdown file.

This file does not include the required SPDX Markdown header comment.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-policy/references/approve-network-requests.md`
around lines 1 - 3, Add the required SPDX Markdown header comment to the top of
this document (above the "# Approve or Deny Agent Network Requests" heading):
restore the SPDX-FileCopyrightText and SPDX-License-Identifier comment lines so
the file contains the project's standard SPDX header in Markdown comment form.

Source: Coding guidelines

skills/nemoclaw-user-manage-policy/SKILL.md (1)

1-6: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header to this Markdown file.

The required SPDX header comment is missing from this file.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-policy/SKILL.md` around lines 1 - 6, Add the
required SPDX header as an HTML comment at the very top of the Markdown file
(before the YAML frontmatter) to match the existing license field; e.g. add <!--
SPDX-License-Identifier: Apache-2.0 --> as the first line so the declared
license ("license: \"Apache-2.0\"") in the frontmatter aligns with the SPDX
header and is discoverable by tooling; ensure you place it before the 'name',
'description', and 'license' fields.

Source: Coding guidelines

skills/nemoclaw-user-monitor-sandbox/SKILL.md (1)

1-16: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the SPDX header (HTML comments) after the frontmatter block.

This Markdown file is missing the required SPDX license header.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-monitor-sandbox/SKILL.md` around lines 1 - 16, Add the
required SPDX license header as an HTML comment immediately after the
frontmatter block in SKILL.md: insert a line like <!-- SPDX-License-Identifier:
Apache-2.0 --> right after the closing --- that ends the YAML frontmatter (use
the license field value "Apache-2.0" from the frontmatter), ensuring the header
appears before the rest of the Markdown content (e.g., before "Monitor Sandbox
Activity and Debug Issues").

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/troubleshooting.md (2)

1-1593: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Do not edit autogenerated .agents/skills/nemoclaw-user-* files directly.

This path is explicitly marked as autogenerated and should be regenerated from source docs/skills instead of hand-editing.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/troubleshooting.md around
lines 1 - 1593, The file header warns that `.agents/skills/nemoclaw-user-*`
files are autogenerated and must not be edited directly; revert any manual edits
to ".agents/skills/nemoclaw-user-reference/references/troubleshooting.md" and
regenerate it from the canonical source (docs/skills) so the autogenerated
artifact matches the source-of-truth; use the repository's documentation build
or skill-generation script that produces the nemoclaw-user-reference outputs and
confirm the regenerated troubleshooting.md includes the original autogenerated
warning line.

Source: Coding guidelines


1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX license header in Markdown-comment format.

The required SPDX header is missing from this Markdown file.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/troubleshooting.md around
lines 1 - 5, Add the required SPDX license header as a Markdown HTML comment at
the very top of the file (before the "# Troubleshooting" heading); use the
project's standard SPDX identifier format (SPDX-License-Identifier: <LICENSE>)
so the header is discoverable by tooling and matches other docs in the repo.

Source: Coding guidelines

skills/nemoclaw-user-reference/references/troubleshooting.md (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Insert the required SPDX license header at the top of this file.

The mandatory Markdown SPDX header comments are missing.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-reference/references/troubleshooting.md` around lines 1
- 5, Add the mandatory SPDX license header as a Markdown/HTML comment block at
the very top of this file (above the "# Troubleshooting" title); include an
SPDX-License-Identifier line and an SPDX-FileCopyrightText line with the correct
year and copyright holder for this project so the file meets the repository's
licensing header requirements.

Source: Coding guidelines

skills/nemoclaw-user-agent-skills/SKILL.md (1)

1-6: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the mandated SPDX header for Markdown files.

This file is missing the required Markdown SPDX HTML comments.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-agent-skills/SKILL.md` around lines 1 - 6, The SKILL.md
file for "nemoclaw-user-agent-skills" is missing the mandated SPDX license HTML
comment; add the SPDX identifier as an HTML comment at the very top of the
Markdown file (e.g., the SPDX-License-Identifier matching the existing license
field "Apache-2.0") so the file begins with the required SPDX header comment
before the YAML frontmatter.

Source: Coding guidelines

skills/nemoclaw-user-get-started/references/quickstart-hermes.md (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

The file is missing the required SPDX HTML comment header before the document content.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-get-started/references/quickstart-hermes.md` at line 1,
Add the required SPDX HTML comment header at the top of the Markdown file before
the document content; insert a single-line HTML comment like <!--
SPDX-FileCopyrightText: <owner> --> followed by <!-- SPDX-License-Identifier:
<license-id> --> (replace <owner> and <license-id> appropriately) immediately
above the existing "# NemoClaw Quickstart with Hermes" heading so the file
includes the mandatory SPDX header.

Source: Coding guidelines

skills/nemoclaw-user-reference/SKILL.md (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

Line 1 starts frontmatter without the required SPDX HTML comment header for .md sources.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-reference/SKILL.md` around lines 1 - 5, The Markdown
file SKILL.md is missing the required SPDX HTML comment header; add an SPDX
license identifier comment (e.g. <!-- SPDX-License-Identifier: Apache-2.0 -->)
immediately before the existing YAML frontmatter at the top of SKILL.md so the
SPDX header precedes the document frontmatter and matches the declared license.

Source: Coding guidelines

.agents/skills/nemoclaw-user-get-started/references/quickstart-hermes.md (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

This Markdown file does not include the mandatory SPDX HTML comment header.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-get-started/references/quickstart-hermes.md at
line 1, Add the required SPDX HTML comment header at the top of the Markdown
file that currently starts with the heading "# NemoClaw Quickstart with Hermes";
insert the standard SPDX header (an HTML comment like <!--
SPDX-FileCopyrightText: ... and SPDX-License-Identifier: ... -->) immediately
above that heading so the file includes the mandatory SPDX metadata.

Source: Coding guidelines

skills/nemoclaw-user-get-started/SKILL.md (1)

1-6: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

This .md file is missing the required SPDX HTML comment header before content/frontmatter.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-get-started/SKILL.md` around lines 1 - 6, This Markdown
file (SKILL.md) is missing the required SPDX HTML comment header; add the SPDX
header (e.g., <!-- SPDX-License-Identifier: Apache-2.0 -->) immediately before
the YAML frontmatter start ('---') at the top of the file so the license
identifier is present as an HTML comment while keeping the existing frontmatter
and fields (name, description, license) intact.

Source: Coding guidelines

.agents/skills/nemoclaw-user-get-started/SKILL.md (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

This autogenerated .md file still needs the repository-required SPDX HTML comment header at the top.
Based on learnings: .agents/skills/nemoclaw-user-*/*.md changes are expected when corresponding docs/ sources change; avoid flagging them as manual edits.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-get-started/SKILL.md around lines 1 - 5, The
file lacks the repository-required SPDX HTML comment header at the top of the
Markdown; add the standard SPDX header comment (e.g. <!--
SPDX-License-Identifier: Apache-2.0 -->) as the very first line of
.agents/skills/nemoclaw-user-get-started/SKILL.md so the file contains the
required SPDX metadata while leaving the existing YAML fields (name:
"nemoclaw-user-get-started", description, license) unchanged; ensure the header
is an HTML comment (not part of the YAML frontmatter) and saved so autogenerated
docs tooling recognizes it.

Sources: Coding guidelines, Learnings

skills/nemoclaw-user-deploy-remote/references/brev-web-ui.md (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Restore the required SPDX header at the top of this Markdown file.

This file is missing the mandatory SPDX copyright and license header in Markdown comment form.

Suggested patch
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
 # Launch NemoClaw with the Brev Web UI
As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-deploy-remote/references/brev-web-ui.md` at line 1, This
Markdown file is missing the mandatory SPDX header; add the required SPDX
copyright and license header as an HTML comment at the very top of the file
(above the existing "# Launch NemoClaw with the Brev Web UI" heading). Ensure
the comment includes the copyright line and the SPDX-License-Identifier (e.g.,
"SPDX-FileCopyrightText: <copyright holder>" and "SPDX-License-Identifier:
<license>") formatted according to project guidelines.

Source: Coding guidelines

skills/nemoclaw-user-reference/references/architecture.md (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the mandatory SPDX header.

The required Markdown SPDX header is missing from this file.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-reference/references/architecture.md` around lines 1 -
4, Add the required SPDX license header as an HTML comment at the top of the
Markdown file that currently starts with the heading "Architecture Details";
insert a single-line or multi-line HTML comment containing the SPDX identifier
(e.g., <!-- SPDX-License-Identifier: MIT -->) before the existing content so the
file (references/architecture.md) includes the mandatory SPDX header.

Source: Coding guidelines

skills/nemoclaw-user-configure-inference/references/set-up-sub-agent.md (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX license header at the top of this Markdown file.

This file is missing the mandated SPDX copyright and license header comment block.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-inference/references/set-up-sub-agent.md`
around lines 1 - 4, This Markdown file lacks the required SPDX license header;
add the mandated SPDX copyright and license header as an HTML comment block at
the very top of the file (above the "Set Up Task-Specific Sub-Agents" heading)
so the header is present in the rendered source, e.g., an HTML comment
containing the SPDX short identifier and copyright line; ensure the comment is
the first thing in the file and follows the project's exact SPDX text format.

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/commands.md (2)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

SPDX header is required here.

This Markdown file needs the SPDX copyright/license header comment block.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/commands.md around lines 1
- 4, This Markdown file is missing the required SPDX license header; add an SPDX
comment block at the very top using HTML comment syntax (<!-- ... -->) with the
appropriate SPDX-License-Identifier and copyright/ownership line so the file
complies with the guideline; ensure the header appears before any content such
as the "# NemoClaw CLI Commands Reference" title or the "import { AgentOnly }"
line.

Source: Coding guidelines


1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Avoid direct edits to autogenerated .agents skill documentation.

Changes for this content should be made in source docs and then regenerated.

As per coding guidelines, “Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/commands.md around lines 1
- 4, This file is autogenerated and must not be edited directly: revert changes
to the header "# NemoClaw CLI Commands Reference" and the import line "import {
AgentOnly }" in the autogenerated output, then make your content changes in the
original source documentation (the source Markdown/template that generates this
file) and run the documentation generator/regeneration step to produce updated
contents for the autogenerated file.

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/network-policies.md (2)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Missing SPDX license header.

Add the required Markdown SPDX header comment block at the top of the file.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/network-policies.md around
lines 1 - 4, Add the required SPDX license header as an HTML comment block at
the very top of this Markdown file (above the "# Network Policies" heading);
specifically insert an HTML comment containing the SPDX-License-Identifier (and
optional copyright line if your project requires it) such as <!--
SPDX-License-Identifier: <LICENSE> --> so the file complies with the project's
"All source files must include an SPDX license header" guideline.

Source: Coding guidelines


1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

This autogenerated .agents doc should not be edited manually.

Please apply the change in the source docs and regenerate this artifact.

As per coding guidelines, “Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/network-policies.md around
lines 1 - 4, The file "network-policies.md" under the .agents output is
autogenerated and must not be edited directly; instead make the change in the
original source docs that produce the "Network Policies" output (the upstream
source for the Network Policies doc), then run the documentation
generation/regeneration step to recreate the autogenerated .agents artifact so
the change is reflected; do not modify the autogenerated ".agents" file itself.

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/architecture.md (2)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Regenerate this .agents page from source instead of editing it directly.

This file is in the autogenerated user-skills namespace and should not be hand-edited.

As per coding guidelines, “Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/architecture.md around
lines 1 - 4, This autogenerated page (architecture.md under the nemoClaw user
skill namespace) was edited directly; revert those manual edits and regenerate
the file from the canonical source (the user-skill generator/template or
blueprint repository) instead of editing .agents/skills/nemoclaw-user-*/*.md by
hand, then commit the upstream source change (e.g., the template or source
YAML/markdown used by the generator) and re-run the generation/build script so
the regenerated file reflects the intended changes.

Source: Coding guidelines


1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Missing required SPDX header in Markdown file.

Please add the mandated SPDX copyright and license header comments at the top.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/architecture.md around
lines 1 - 4, Add the required SPDX license header as an HTML comment at the very
top of the Markdown file (before the "# Architecture Details" heading) in
.agents/skills/nemoclaw-user-reference/references/architecture.md; include both
the SPDX copyright text and the SPDX-License-Identifier (e.g., a copyright owner
line and the license identifier) in the comment so the file complies with the
project's "All source files must include an SPDX license header" rule.

Source: Coding guidelines

.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md (2)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header block.

The Markdown SPDX copyright/license header is missing from this file.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
@.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md
around lines 1 - 4, Add an SPDX license header as an HTML comment at the very
top of this Markdown file (before the "# NemoClaw Inference Options" heading and
any imports) to satisfy the "All source files must include an SPDX license
header" rule; include both SPDX-FileCopyrightText and SPDX-License-Identifier
fields in the comment block so the file
.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md
has the required SPDX metadata.

Source: Coding guidelines


1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Do not edit autogenerated .agents skill docs directly.

This path is designated as autogenerated user-skill output and should be regenerated from source docs instead of being manually modified.

As per coding guidelines, “Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
@.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md
around lines 1 - 4, This file (the doc titled "NemoClaw Inference Options"
containing the import line "import { AgentOnly } from
\"../_components/AgentGuide\"") is an autogenerated user-skill doc and must not
be edited directly; revert any manual changes to this inference-options.md, then
update the original source documentation or the skill-docs generator that
produces this file (edit the corresponding nemoclaw-user source doc or generator
input) and re-run the docs generation process so the change is applied upstream
rather than editing the autogenerated file.

Source: Coding guidelines

skills/nemoclaw-user-reference/references/commands.md (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header at the top of this Markdown file.

This file is missing the mandated Markdown SPDX header block. Please add the two HTML-comment SPDX lines before the title on Line 1.

As per coding guidelines, all *.md files must include SPDX headers using HTML comments (SPDX-FileCopyrightText and SPDX-License-Identifier).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-reference/references/commands.md` at line 1, Add the
required SPDX header block as two HTML comments immediately before the document
title "# NemoClaw CLI Commands Reference": include an SPDX-FileCopyrightText
line with the copyright holder/year and an SPDX-License-Identifier line with the
license identifier (e.g., "SPDX-License-Identifier: Apache-2.0"), ensuring both
are placed above the title line in this Markdown file.

Source: Coding guidelines

skills/nemoclaw-user-reference/references/network-policies.md (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header at the top of this Markdown file.

This Markdown page is missing the required SPDX license header block before the H1 on Line 1.

As per coding guidelines, all *.md files must include SPDX headers using HTML comments (SPDX-FileCopyrightText and SPDX-License-Identifier).

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-reference/references/network-policies.md` at line 1,
This Markdown file is missing the SPDX header: add an HTML comment block with
SPDX-FileCopyrightText and SPDX-License-Identifier immediately above the
existing H1 "# Network Policies" so the header precedes the content; ensure the
two SPDX lines use the exact keys "SPDX-FileCopyrightText" and
"SPDX-License-Identifier" and include the correct copyright text and license
identifier per project guidelines.

Source: Coding guidelines

🟠 Major comments (23)
skills/nemoclaw-user-configure-security/references/best-practices.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header to this Markdown file.

The SPDX license header required for Markdown files is missing.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-security/references/best-practices.md` around
lines 1 - 4, This Markdown file is missing the SPDX license header; add an HTML
comment SPDX header as the very first line (e.g. <!-- SPDX-License-Identifier:
MIT --> or the project's actual SPDX identifier) so it appears before the "#
NemoClaw..." title and any code/import lines (refer to this file's top content
and the existing import { AgentOnly } line to locate where to insert it).

Source: Coding guidelines

skills/nemoclaw-user-configure-security/references/openclaw-controls.md-1-2 (1)

1-2: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header to this Markdown file.

This Markdown file is missing the required SPDX copyright and license header.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-security/references/openclaw-controls.md`
around lines 1 - 2, This file titled "OpenClaw Security Controls Beyond
NemoClaw's Scope" is missing the required SPDX header; add a standard SPDX
copyright and license header as the first lines of the Markdown (above the
existing title), including the copyright owner/year statement and an
SPDX-License-Identifier (e.g., MIT, Apache-2.0, etc.) so the file has both
copyright and license metadata at the top.

Source: Coding guidelines

skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header to this Markdown file.

The file is missing the mandatory SPDX header comment block for Markdown sources.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md`
around lines 1 - 4, Add the required SPDX header comment block to the top of the
Markdown file by inserting an HTML comment containing both the SPDX
copyright/text and the SPDX-License-Identifier (for example <!--
SPDX-FileCopyrightText: YourOrg or Author --> and <!-- SPDX-License-Identifier:
<LICENSE> -->) so the file
(skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md)
includes the mandatory SPDX metadata in an HTML comment at the very beginning.

Source: Coding guidelines

skills/nemoclaw-user-configure-security/references/credential-storage.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header to this Markdown file.

Please include the mandated Markdown SPDX header comment block in this file.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-security/references/credential-storage.md`
around lines 1 - 4, Add the required Markdown SPDX header comment block as the
very first lines of the file (above the "# Credential Storage" heading and the
import line). Insert a single HTML comment SPDX tag in the form <!--
SPDX-License-Identifier: <LICENSE> --> (replace <LICENSE> with the correct
identifier for this repository) so the file contains the mandated SPDX header
before any other content such as the "# Credential Storage" heading or the
import { AgentOnly } line.

Source: Coding guidelines

skills/nemoclaw-user-manage-sandboxes/references/messaging-channels.md-1-3 (1)

1-3: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the mandatory SPDX license header.

Line 1 starts with the heading and Line 3 imports a component, but the required Markdown SPDX HTML comments are absent.

As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/references/messaging-channels.md`
around lines 1 - 3, Add the required SPDX license header as an HTML comment at
the top of the Markdown file: insert the SPDX header comment before the existing
content (before the "# Messaging Channels" heading) so the file contains the
SPDX notice in HTML comment form; ensure it appears above the import line
"import { AgentOnly } from \"../_components/AgentGuide\";" and follows the
project's standard SPDX text exactly.

Source: Coding guidelines

skills/nemoclaw-user-manage-sandboxes/references/install-plugins-hermes.md-1-2 (1)

1-2: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add SPDX header to this new Markdown page.

The file begins at Line 1 without the required SPDX HTML comment header.

As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/references/install-plugins-hermes.md`
around lines 1 - 2, Add the required SPDX HTML comment header at the top of the
Markdown file (above the existing "# Install Hermes Plugins" heading); insert an
HTML comment containing the SPDX license identifier (e.g.,
SPDX-License-Identifier: <LICENSE>) as per project guidelines so every source
file includes the SPDX header.

Source: Coding guidelines

skills/nemoclaw-user-manage-sandboxes/references/backup-restore.md-1-3 (1)

1-3: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add required SPDX header at the top of the file.

Line 1 starts with content/imports and does not include the mandatory SPDX HTML comments.

As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/references/backup-restore.md` around
lines 1 - 3, The file is missing the required SPDX license header; add an HTML
comment SPDX header as the very first lines of the Markdown (above the "# Backup
and Restore Workspace Files" title and above the import statement), e.g. an HTML
comment with the SPDX short identifier and copyright line per repo policy so the
file contains the mandatory SPDX header before any content like the existing
import { AgentOnly } or the document title.

Source: Coding guidelines

skills/nemoclaw-user-manage-sandboxes/references/runtime-controls.md-1-3 (1)

1-3: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add SPDX header at the top of this file.

The required Markdown SPDX HTML comments are missing before the page content.

As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/references/runtime-controls.md` around
lines 1 - 3, Add the required SPDX license header as HTML comments at the very
top of the Markdown file (before the "# Runtime Controls and Sandbox Mutability"
heading and before the import line). Insert two HTML comment lines: one for
copyright/ownership (e.g. <!-- SPDX-FileCopyrightText: YEAR YourNameOrOrg -->)
and one for the license identifier (e.g. <!-- SPDX-License-Identifier: MIT -->),
ensuring they appear exactly as HTML comments so Markdown renders correctly;
place them above the existing content/import statements in runtime-controls.md.

Source: Coding guidelines

skills/nemoclaw-user-manage-sandboxes/SKILL.md-1-6 (1)

1-6: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add required SPDX header to this Markdown file.

Line 1 starts directly with frontmatter; the required Markdown SPDX HTML comments are missing.

Suggested fix
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
 ---
 name: "nemoclaw-user-manage-sandboxes"

As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/SKILL.md` around lines 1 - 6, Insert an
SPDX license HTML comment at the top of SKILL.md before the existing YAML
frontmatter; add an SPDX-License-Identifier line with the project license
(SPDX-License-Identifier: Apache-2.0) and include the required SPDX copyright
tag per repo convention, ensuring the comment is an HTML comment (<!-- ... -->)
so it remains valid in Markdown and sits above the frontmatter block.

Source: Coding guidelines

skills/nemoclaw-user-manage-sandboxes/references/workspace-files.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX license header at the top of this Markdown file.

This file is missing the required Markdown SPDX header comments.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/references/workspace-files.md` around
lines 1 - 4, Add the missing SPDX license header as the very first line of this
Markdown file (before the existing import { AgentOnly } line); insert a
Markdown/HTML comment-style SPDX identifier using the appropriate license id for
the project (e.g., MIT or Apache-2.0) so the file starts with the SPDX comment
header.

Source: Coding guidelines

skills/nemoclaw-user-overview/references/how-it-works.md-1-5 (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

SPDX header is missing from this Markdown source file.

Please add the required Markdown SPDX HTML header lines.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/references/how-it-works.md` around lines 1 - 5,
The file "NemoClaw Architecture Overview" (starts with the heading "NemoClaw
Architecture Overview" and an import line 'import { AgentCli, AgentOnly } from
"../_components/AgentGuide";') is missing the required SPDX HTML header; add the
SPDX header lines at the very top of the Markdown file (HTML comment lines with
license identifier and copyright notice per project policy) so the file begins
with the SPDX header before the existing heading.

Source: Coding guidelines

skills/nemoclaw-user-overview/references/overview.md-1-5 (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Required SPDX Markdown header is missing.

Please include the SPDX copyright and license HTML comments at the top.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/references/overview.md` around lines 1 - 5, The
file is missing the required SPDX HTML comment header; add the SPDX copyright
and license comments at the very top of the file (before the "# Overview of
NVIDIA NemoClaw" header and any imports) using the standard format (e.g. <!--
SPDX-FileCopyrightText: <year> <copyright holder> --> and <!--
SPDX-License-Identifier: <license-id> -->), ensuring the comments precede the
existing content so tools can detect the license.

Source: Coding guidelines

skills/nemoclaw-user-overview/references/ecosystem-hermes.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Missing required SPDX header in this Markdown file.

Please add the mandated Markdown SPDX HTML comments at the top of the file.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/references/ecosystem-hermes.md` around lines 1
- 4, Add the required SPDX Markdown HTML comments at the top of
ecosystem-hermes.md by inserting the SPDX header lines (e.g. an <!--
SPDX-FileCopyrightText: ... --> comment and an <!-- SPDX-License-Identifier: ...
--> comment) immediately before the existing "# Ecosystem" content so the file
contains both the copyright attribution and the license identifier as mandated.

Source: Coding guidelines

skills/nemoclaw-user-overview/references/ecosystem.md-1-5 (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add SPDX header comments required for Markdown files.

This file does not include the required SPDX copyright and license header.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/references/ecosystem.md` around lines 1 - 5,
Add the required SPDX header comments at the top of the Markdown (above the "#
Ecosystem" heading) by inserting SPDX-FileCopyrightText and
SPDX-License-Identifier HTML comment lines; replace YEAR, COPYRIGHT_HOLDER and
LICENSE_IDENTIFIER with the correct values for this project (e.g., <!--
SPDX-FileCopyrightText: 2026 Acme Corp --> and <!-- SPDX-License-Identifier:
Apache-2.0 -->) so the file containing the "Ecosystem" section includes the
proper copyright and license metadata.

Source: Coding guidelines

skills/nemoclaw-user-overview/references/release-notes.md-1-6 (1)

1-6: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

SPDX header is required but missing in this Markdown file.

Please add the required SPDX HTML comment header at the top.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/references/release-notes.md` around lines 1 -
6, Add the required SPDX HTML comment header as the very first line of this
Markdown file (above the "# Release Notes" heading) — insert an SPDX comment
like <!-- SPDX-License-Identifier: Apache-2.0 --> (or the repository’s actual
SPDX identifier) at the top of release-notes.md so the file contains the
required machine-readable license header.

Source: Coding guidelines

skills/nemoclaw-user-overview/SKILL.md-1-5 (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

This Markdown file is missing the required SPDX header comments.

Suggested fix
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
 ---
 name: "nemoclaw-user-overview"
 description: "Explains what NemoClaw covers: onboarding, lifecycle management, and agent operations within OpenShell containers, plus capabilities and why it exists. Use when users ask what NemoClaw is or what the project provides. For ecosystem placement or OpenShell-only paths, use the Ecosystem page; for internal mechanics, use How It Works. Trigger keywords - nemoclaw overview, openclaw always-on assistants, hermes agent, nvidia openshell, nvidia nemotron, nemoclaw ecosystem, nemohermes, nemoclaw vs openshell, run hermes openshell sandbox, openclaw openshell, sandboxed openclaw, how nemoclaw works, nemoclaw sandbox lifecycle blueprint, nemoclaw release notes, nemoclaw changelog."
 license: "Apache-2.0"
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/SKILL.md` around lines 1 - 5, Add the required
SPDX header to the top of the Markdown file SKILL.md as an HTML comment that
matches the declared license (Apache-2.0); insert a single line like <!--
SPDX-License-Identifier: Apache-2.0 --> before the YAML/frontmatter so the file
contains the SPDX identifier consistent with the "license" field in the
frontmatter and any repository licensing rules.

Source: Coding guidelines

skills/nemoclaw-user-get-started/references/windows-preparation.md-1-1 (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

Line 1 starts directly with content; this .md file needs the required SPDX HTML comment header.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-get-started/references/windows-preparation.md` at line
1, Add the required SPDX HTML comment header to the top of the Markdown file
that begins with the heading "# Prepare Windows for NemoClaw" so the file has an
SPDX identifier (e.g. <!-- SPDX-License-Identifier: MIT -->) as the very first
line before any content or headings.

Source: Coding guidelines

skills/nemoclaw-user-get-started/references/prerequisites.md-1-3 (1)

1-3: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header for Markdown files.

Line 1 starts content without the mandatory SPDX HTML comment header for Markdown files.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-get-started/references/prerequisites.md` around lines 1
- 3, Add the required SPDX HTML comment header at the very top of the Markdown
file (prerequisites.md) so Line 1 is an SPDX comment like <!--
SPDX-License-Identifier: <LICENSE> --> (replace <LICENSE> with the project's
actual identifier), ensuring the header appears before the "# Prerequisites"
heading and uses the exact HTML comment format required for Markdown SPDX
headers.

Source: Coding guidelines

skills/nemoclaw-user-configure-inference/SKILL.md-1-1 (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header comments to this Markdown file.

The mandatory SPDX header is missing.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-inference/SKILL.md` at line 1, Add the
required SPDX header comments to the top of SKILL.md: insert HTML-style comment
lines as the very first lines containing an SPDX-License-Identifier and an
SPDX-FileCopyrightText entry with the correct license identifier and copyright
holder/year for this project so the file has the mandated SPDX metadata.

Source: Coding guidelines

skills/nemoclaw-user-configure-inference/references/inference-options.md-1-1 (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Insert the required SPDX header at the top of the file.

This Markdown file is missing the mandated SPDX copyright/license comments.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-configure-inference/references/inference-options.md` at
line 1, Add the required SPDX header as HTML comment lines at the very top of
the file (above the "# NemoClaw Inference Options" heading): include an
SPDX-FileCopyrightText line with the correct copyright holder/year and an
SPDX-License-Identifier line with the project's license identifier, ensuring
both are in the form of HTML comments so they remain valid in Markdown.

Source: Coding guidelines

skills/nemoclaw-user-deploy-remote/references/sandbox-hardening.md-1-1 (1)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Re-add the mandatory SPDX header comments.

The SPDX copyright/license header is missing from this Markdown file.

Suggested patch
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
 # Sandbox Image Hardening
As per coding guidelines: “All source files must include an SPDX license header … (use HTML comments for Markdown).”
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-deploy-remote/references/sandbox-hardening.md` at line
1, Add the missing SPDX header as HTML comments at the very top of this Markdown
file (above the "Sandbox Image Hardening" heading): include an SPDX copyright
line (SPDX-FileCopyrightText) and an SPDX-License-Identifier line using the
required comment format for Markdown (HTML comments). Ensure the comments appear
before any content so tools can detect the license, and use the repository's
standard copyright holder and license identifier.

Source: Coding guidelines

skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX license header.

The required Markdown SPDX header block is missing from this file.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md`
around lines 1 - 4, The file is missing the required SPDX license header; add
the repository's standard SPDX header as an HTML comment at the very top of
skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md
(e.g. <!-- SPDX-License-Identifier: <LICENSE> -->), using the exact license
identifier your repo requires and place it before the existing content (before
"# Switch Inference Models at Runtime") so the Markdown file complies with the
"use HTML comments for Markdown" guideline.

Source: Coding guidelines

skills/nemoclaw-user-configure-inference/references/tool-calling-reliability.md-1-4 (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Insert the SPDX header comment block.

This Markdown file currently lacks the required SPDX copyright/license header.

As per coding guidelines, “All source files must include an SPDX license header … (use HTML comments for Markdown)”.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
`@skills/nemoclaw-user-configure-inference/references/tool-calling-reliability.md`
around lines 1 - 4, This Markdown file (the document starting with the heading
"Tool-Calling Reliability for Local Inference") lacks the required SPDX license
header; add the standard SPDX header as an HTML comment at the very top of the
file (before the "# Tool-Calling Reliability for Local Inference" heading)
following the project's license template so every source file includes the SPDX
copyright/license block.

Source: Coding guidelines

🟡 Minor comments (2)
skills/nemoclaw-user-manage-sandboxes/references/runtime-controls.md-80-80 (1)

80-80: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Correct duplicated command token in Hermes CLI sentence.

Line 80 currently reads “every nemoclaw and nemoclaw command,” which is ambiguous and likely an accidental duplication.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/references/runtime-controls.md` at line
80, The sentence in runtime-controls.md currently contains a duplicated command
token "every `nemoclaw` and `nemoclaw` command"; update that phrase to the
correct pair by replacing the second backticked token with the Hermes CLI token
(change "every `nemoclaw` and `nemoclaw` command" to "every `nemoclaw` and
`hermes` command") so the CLI reference line correctly mentions both tools.
skills/nemoclaw-user-manage-sandboxes/SKILL.md-22-23 (1)

22-23: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix duplicated command name in Hermes CLI boundary sentence.

Line 22 repeats nemoclaw twice, which makes the command boundary unclear for readers.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-manage-sandboxes/SKILL.md` around lines 22 - 23, The
sentence in SKILL.md repeats the command name `nemoclaw` and should instead list
the three distinct CLI boundaries; update the text in the CLI Selection Guide
sentence so it reads that the boundary is between `nemoclaw`,
`nemoclaw-user-reference`, and `openshell` (replace the duplicated `nemoclaw`
with `nemoclaw-user-reference` to match the referenced skill).
🧹 Nitpick comments (3)
skills/nemoclaw-user-overview/SKILL.md (1)

3-3: ⚡ Quick win

Use NVIDIA in all caps in trigger keywords.

nvidia openshell and nvidia nemotron should be NVIDIA ... to match the word-list rule.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/SKILL.md` at line 3, Update the trigger
keywords in the description field so all occurrences of "nvidia" are uppercase
"NVIDIA"; specifically edit the description's trigger keywords list (the string
under the description key in SKILL.md) and replace "nvidia openshell" and
"nvidia nemotron" with "NVIDIA openshell" and "NVIDIA nemotron" (and any other
lowercase "nvidia" tokens) to comply with the word-list rule.

Source: Coding guidelines

skills/nemoclaw-user-overview/references/ecosystem-hermes.md (1)

15-16: ⚡ Quick win

Remove emoji from technical documentation content.

The mermaid node labels include emoji. The docs guideline forbids emoji in technical prose/content.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/nemoclaw-user-overview/references/ecosystem-hermes.md` around lines 15
- 16, Remove the emoji characters from the mermaid node labels so technical
prose contains no emoji: update the NC and OS node definitions (e.g. NC["🦞
NVIDIA NemoClaw<br/>CLI, blueprint"] and OS["🐚 NVIDIA OpenShell<br/>Gateway,
policy, inference routing"]) to plain text such as NC["NVIDIA NemoClaw<br/>CLI,
blueprint"] and OS["NVIDIA OpenShell<br/>Gateway, policy, inference routing"];
also scan nearby mermaid nodes in the same file for any other emoji and remove
them for consistency.

Source: Coding guidelines

docs/about/release-notes.mdx (1)

20-24: ⚡ Quick win

Split multi-sentence bullets into one sentence per source line.

Line 20 through Line 24 each contain multiple sentences on one line; docs style requires one sentence per line for readable diffs.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/about/release-notes.mdx` around lines 20 - 24, Each bullet currently
contains multiple sentences; split each bullet so every sentence is on its own
source line (i.e., one sentence per list item line) while preserving the leading
"-" and links and keeping sentences in the same order; update the four bullets
that start with "OpenClaw runtime guidance...", "Onboarding and sandbox
lifecycle...", "Local inference setup...", and "Messaging and day-two CLI
operations..." so each sentence becomes a separate line (maintain links like
[Architecture], [NemoClaw CLI Commands Reference], [NemoClaw Inference Options],
and [Messaging Channels] in their original sentences).

Source: Coding guidelines

@miyoungc miyoungc marked this pull request as ready for review June 6, 2026 01:50
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 7

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (10)
.agents/skills/nemoclaw-contributor-update-docs/SKILL.md (1)

1-5: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX license header for this Markdown source file.

This file is missing the mandatory SPDX header in Markdown-comment form immediately after frontmatter.

As per coding guidelines, "**/*.{...md...} files must include SPDX headers, using HTML comments for Markdown."

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-contributor-update-docs/SKILL.md around lines 1 - 5,
The SKILL.md file is missing the required SPDX license header; add an
HTML-comment SPDX header immediately after the YAML frontmatter (i.e., directly
after the closing ---) in the SKILL.md document so Markdown processors see the
frontmatter first and the SPDX header second; ensure the comment contains the
SPDX-License-Identifier and any required copyright/owner token per project
policy.

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/troubleshooting.md (1)

1-3: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add missing SPDX metadata header.

This Markdown source is missing the mandatory SPDX copyright and license lines.

As per coding guidelines: all **/*.{... ,md,mdx,...} files must include SPDX headers, and Markdown files must use HTML comments.

Suggested patch
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
 # Troubleshooting
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/troubleshooting.md around
lines 1 - 3, Add the missing SPDX metadata header to the top of this Markdown
document by inserting the required SPDX copyright and license lines as HTML
comments (e.g., <!-- SPDX-FileCopyrightText: ... --> and <!--
SPDX-License-Identifier: ... -->) above the "Troubleshooting" title so the file
contains the mandated SPDX header format for Markdown files.

Source: Coding guidelines

.agents/skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Insert SPDX header comments before the title.

The required SPDX copyright and license header is missing.

As per coding guidelines: all **/*.{... ,md,mdx,...} files must include SPDX headers, using HTML comments for Markdown.

Suggested patch
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
 # Switch Inference Models at Runtime
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
@.agents/skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md
around lines 1 - 4, Add the required SPDX header as HTML comments at the very
top of the Markdown file (before the title line "# Switch Inference Models at
Runtime"); include both an SPDX-FileCopyrightText comment with the correct
year/owner and an SPDX-FileCopyrightText comment or SPDX-License-Identifier line
for the license (e.g., SPDX-License-Identifier), then save — locate the file
area that contains the title and the subsequent import line "import { AgentOnly
} from \"../_components/AgentGuide\";" to ensure the SPDX comments are placed
immediately above the title.

Source: Coding guidelines

.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md (1)

1-4: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Add the required SPDX header at the top of this Markdown file.

This file is missing the required SPDX copyright and license header for Markdown sources.

As per coding guidelines: all **/*.{... ,md,mdx,...} files must include SPDX headers, and for Markdown the header must use HTML comments.

Suggested patch
+<!-- SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. -->
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+
 # NemoClaw Inference Options
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
@.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md
around lines 1 - 4, Add the required SPDX header as an HTML comment at the very
top of this Markdown file (before the "# NemoClaw Inference Options" title); the
header must include the SPDX copyright statement and an SPDX-License-Identifier
(e.g. <!-- SPDX-FileCopyrightText: <year> <owner> --> and <!--
SPDX-License-Identifier: <license-id> -->) following the project guidance so the
file contains the proper SPDX metadata.

Source: Coding guidelines

.agents/skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md (2)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

SPDX license header is required for this Markdown file.

The required SPDX copyright/license header is missing at the top of this source file.

As per coding guidelines, "All source files must include an SPDX license header ... (use HTML comments for Markdown)".

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
@.agents/skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md
at line 1, This Markdown file ("# Common NemoClaw Integration Policy Examples"
heading) is missing the required SPDX license header; add an HTML comment SPDX
header at the very top of the file (e.g. <!-- SPDX-FileCopyrightText: ... and/or
<!-- SPDX-License-Identifier: ... -->) following your project's standard format,
ensuring the SPDX copyright and license identifier are present before the "#
Common NemoClaw Integration Policy Examples" heading.

Source: Coding guidelines


1-374: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Autogenerated skill content should be regenerated, not hand-edited.

This path is an autogenerated user-skill file; please revert direct edits and regenerate from the canonical docs conversion flow.

As per coding guidelines, "Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly".

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In
@.agents/skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md
around lines 1 - 374, This file is an autogenerated user-skill Markdown that was
edited directly; revert your manual changes to restore the original generated
content and regenerate the skill via the canonical docs conversion flow instead
of hand-editing; specifically remove any edits around the autogenerated notice
and the AgentOnly components (AgentOnly variant="openclaw" / variant="hermes")
and re-run the generator that produces integration-policy-examples.md so the
file matches the canonical source and future auto-updates.

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/network-policies.md (2)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Missing SPDX header in Markdown source.

Line 1 should include the required SPDX copyright and license header in Markdown-comment form.

As per coding guidelines, "All source files must include an SPDX license header ... (use HTML comments for Markdown)".

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/network-policies.md at
line 1, Add the required SPDX license header as an HTML comment at the very top
of the Markdown source (above the existing "# Network Policies" heading); insert
a single-line HTML comment containing the copyright owner and SPDX identifier
(for example: <!-- Copyright 2026 ACME Corp. SPDX-License-Identifier: Apache-2.0
-->) so the file begins with the proper SPDX header in Markdown-comment form.

Source: Coding guidelines


1-130: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Do not edit autogenerated user-skill files directly.

This file is under .agents/skills/nemoclaw-user-*/*.md, so direct edits should be reverted and regenerated from the docs/source pipeline instead.

As per coding guidelines, "Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly".

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/network-policies.md around
lines 1 - 130, This edited "Network Policies" user-skill (network-policies.md)
is autogenerated and must not be edited directly; revert the changes to this
file, update the source-of-truth in the docs/source pipeline that generates the
`.agents/skills/nemoclaw-user-*/*.md` artifacts, and regenerate the skill
artifacts (run the docs build/generation job) so the corrected content flows
into network-policies.md; reference the "Network Policies" header to locate the
autogenerated file and include a brief commit message noting "Revert direct edit
— regenerate from docs/source".

Source: Coding guidelines

.agents/skills/nemoclaw-user-reference/references/commands.md (2)

1-1: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Required SPDX header is missing.

Add the SPDX copyright and license header at the top of this Markdown source file.

As per coding guidelines, "All source files must include an SPDX license header ... (use HTML comments for Markdown)".

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/commands.md at line 1, Add
an SPDX license header as an HTML comment at the very top of the Markdown file
(above the "# NemoClaw CLI Commands Reference" title) using the SPDX fields
required by our guidelines (e.g., a copyright line with year and owner and an
SPDX-License-Identifier), so the file contains a leading <!-- ... --> comment
that includes the SPDX copyright and license identifier.

Source: Coding guidelines


1-2010: ⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Direct edits to autogenerated skill docs are not allowed.

This file should be updated via the docs-to-skills generation path, not by manual edits in .agents/skills/nemoclaw-user-*.

As per coding guidelines, "Autogenerated user skills under .agents/skills/nemoclaw-user-*/*.md must never be edited directly".

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-reference/references/commands.md around lines 1
- 2010, This file was edited directly but is autogenerated; revert the manual
changes to "NemoClaw CLI Commands Reference" under the
.agents/skills/nemoclaw-user-* output, then make your content change in the
canonical docs source used by the docs-to-skills generator (not in the generated
markdown), run the docs-to-skills generation pipeline to regenerate the outputs
(so files like the generated commands.md are updated), commit the regenerated
files only, and ensure CI/regen checks pass so future edits come via the
generator rather than direct edits to the autogenerated skill docs.

Source: Coding guidelines

🧹 Nitpick comments (1)
.agents/skills/nemoclaw-contributor-update-docs/SKILL.md (1)

184-186: ⚡ Quick win

Rewrite this updated note to active voice and keep one full sentence on one source line.

The new text uses passive voice (“is refreshed...”) and splits a single sentence across multiple lines.

As per coding guidelines, "Active voice required" and "One sentence per line in source."

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-contributor-update-docs/SKILL.md around lines 184 -
186, Rewrite the note that begins "Do not include the root `skills/` directory
as an output target..." into active voice and place the entire sentence on a
single source line; for example, change passive phrasing ("That directory is
refreshed by a separate process and must not be updated by this skill.") to
active voice ("A separate process refreshes the skills/ directory, so this skill
must not update it.") and ensure the result is one full sentence on one line in
SKILL.md.

Source: Coding guidelines

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In
@.agents/skills/nemoclaw-user-configure-security/references/best-practices.md:
- Line 428: The Markdown table cell text beginning with "Default | Startup
auto-pairing and `connect`-time approval share one policy." contains three
sentences on one line; split it so each sentence lives on its own line in the
same table cell (e.g., one line for "Default | Startup auto-pairing and
`connect`-time approval share one policy.", one line for "NemoClaw approves
devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to
`webchat` or `cli`.", and one line for "It only approves for `operator.pairing`,
`operator.read`, and `operator.write` scopes; all other clients or scopes are
rejected and logged.").
- Line 465: The paragraph describing path classifiers and credential patterns
must be split so each sentence is on its own line; update the Markdown around
the isMemoryPath() description so the sentence about three path classifiers and
credential-shaped text is one line and the following sentence enumerating the
three classifiers (referencing MEMORY_PATH_SEGMENTS, MEMORY_BASENAMES, and
MEMORY_RELATIVE_PREFIXES) is on its own line; ensure the three classifier
categories remain intact and keep the symbol names (isMemoryPath(),
MEMORY_PATH_SEGMENTS, MEMORY_BASENAMES, MEMORY_RELATIVE_PREFIXES) unchanged for
clarity.

In @.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md:
- Line 116: The sentence in the autogenerated SKILL.md uses passive voice;
update the source docs file docs/manage-sandboxes/lifecycle.mdx to use active
voice (e.g., change "Gateway and dashboard cleanup is scoped by sandbox name and
port." to "NemoClaw scopes gateway and dashboard cleanup by sandbox name and
port.") and regenerate artifacts so the change propagates into
.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md; edit the lifecycle.mdx
entry where that sentence appears and run docs-to-skills.py to produce the
updated SKILL.md.

In @.agents/skills/nemoclaw-user-overview/references/how-it-works.md:
- Line 68: Change the passive sentence "Runtime context is prepended as system
guidance, so sandbox and policy instructions stay active without appearing in
the visible chat transcript." in the source docs file to active voice (e.g.,
"The plugin prepends runtime context as system guidance, so sandbox and policy
instructions stay active without appearing in the visible chat transcript.");
make the edit in docs/about/how-it-works.mdx (not the autogenerated .agents/...
file) and keep the rest of the sentence meaning intact.

In `@docs/reference/commands.mdx`:
- Line 1819: Update the passive phrase in the table row for
NEMOCLAW_MINIMAL_BOOTSTRAP so it uses active voice: replace "Existing files are
not deleted" with an active construction such as "This setting does not delete
existing files" (or "It does not delete existing files") in the description cell
for NEMOCLAW_MINIMAL_BOOTSTRAP to convey the same meaning in active voice.

In `@docs/security/best-practices.mdx`:
- Line 453: The table cell containing "Default | Startup auto-pairing and
`connect`-time approval share one policy. NemoClaw approves devices with
`clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or
`cli`, and only for `operator.pairing`, `operator.read`, and `operator.write`
scopes. All other clients or scopes are rejected and logged." should be split so
each sentence is on its own source line; edit the table row (the cell after the
first pipe) so the three sentences appear on three separate lines (keeping the
leading "Default |" and any required pipe separators intact) — ensure you
preserve escaping/backticks and punctuation exactly while breaking the
single-line cell into three lines.
- Line 490: The paragraph on memory path classifiers is two sentences and needs
to be split so each sentence is on its own Markdown line; edit the line
containing the descriptions of isMemoryPath(), MEMORY_PATH_SEGMENTS,
MEMORY_BASENAMES, and MEMORY_RELATIVE_PREFIXES so that each sentence becomes a
separate line (i.e., break after the first sentence describing what it covers
and then break the long sentence that lists the three classifiers into its own
line), preserving the exact identifiers and examples (`isMemoryPath()`,
`MEMORY_PATH_SEGMENTS`, `MEMORY_BASENAMES`, `MEMORY_RELATIVE_PREFIXES`, and the
example paths/basenames).

---

Outside diff comments:
In @.agents/skills/nemoclaw-contributor-update-docs/SKILL.md:
- Around line 1-5: The SKILL.md file is missing the required SPDX license
header; add an HTML-comment SPDX header immediately after the YAML frontmatter
(i.e., directly after the closing ---) in the SKILL.md document so Markdown
processors see the frontmatter first and the SPDX header second; ensure the
comment contains the SPDX-License-Identifier and any required copyright/owner
token per project policy.

In
@.agents/skills/nemoclaw-user-configure-inference/references/inference-options.md:
- Around line 1-4: Add the required SPDX header as an HTML comment at the very
top of this Markdown file (before the "# NemoClaw Inference Options" title); the
header must include the SPDX copyright statement and an SPDX-License-Identifier
(e.g. <!-- SPDX-FileCopyrightText: <year> <owner> --> and <!--
SPDX-License-Identifier: <license-id> -->) following the project guidance so the
file contains the proper SPDX metadata.

In
@.agents/skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md:
- Around line 1-4: Add the required SPDX header as HTML comments at the very top
of the Markdown file (before the title line "# Switch Inference Models at
Runtime"); include both an SPDX-FileCopyrightText comment with the correct
year/owner and an SPDX-FileCopyrightText comment or SPDX-License-Identifier line
for the license (e.g., SPDX-License-Identifier), then save — locate the file
area that contains the title and the subsequent import line "import { AgentOnly
} from \"../_components/AgentGuide\";" to ensure the SPDX comments are placed
immediately above the title.

In
@.agents/skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md:
- Line 1: This Markdown file ("# Common NemoClaw Integration Policy Examples"
heading) is missing the required SPDX license header; add an HTML comment SPDX
header at the very top of the file (e.g. <!-- SPDX-FileCopyrightText: ... and/or
<!-- SPDX-License-Identifier: ... -->) following your project's standard format,
ensuring the SPDX copyright and license identifier are present before the "#
Common NemoClaw Integration Policy Examples" heading.
- Around line 1-374: This file is an autogenerated user-skill Markdown that was
edited directly; revert your manual changes to restore the original generated
content and regenerate the skill via the canonical docs conversion flow instead
of hand-editing; specifically remove any edits around the autogenerated notice
and the AgentOnly components (AgentOnly variant="openclaw" / variant="hermes")
and re-run the generator that produces integration-policy-examples.md so the
file matches the canonical source and future auto-updates.

In @.agents/skills/nemoclaw-user-reference/references/commands.md:
- Line 1: Add an SPDX license header as an HTML comment at the very top of the
Markdown file (above the "# NemoClaw CLI Commands Reference" title) using the
SPDX fields required by our guidelines (e.g., a copyright line with year and
owner and an SPDX-License-Identifier), so the file contains a leading <!-- ...
--> comment that includes the SPDX copyright and license identifier.
- Around line 1-2010: This file was edited directly but is autogenerated; revert
the manual changes to "NemoClaw CLI Commands Reference" under the
.agents/skills/nemoclaw-user-* output, then make your content change in the
canonical docs source used by the docs-to-skills generator (not in the generated
markdown), run the docs-to-skills generation pipeline to regenerate the outputs
(so files like the generated commands.md are updated), commit the regenerated
files only, and ensure CI/regen checks pass so future edits come via the
generator rather than direct edits to the autogenerated skill docs.

In @.agents/skills/nemoclaw-user-reference/references/network-policies.md:
- Line 1: Add the required SPDX license header as an HTML comment at the very
top of the Markdown source (above the existing "# Network Policies" heading);
insert a single-line HTML comment containing the copyright owner and SPDX
identifier (for example: <!-- Copyright 2026 ACME Corp. SPDX-License-Identifier:
Apache-2.0 -->) so the file begins with the proper SPDX header in
Markdown-comment form.
- Around line 1-130: This edited "Network Policies" user-skill
(network-policies.md) is autogenerated and must not be edited directly; revert
the changes to this file, update the source-of-truth in the docs/source pipeline
that generates the `.agents/skills/nemoclaw-user-*/*.md` artifacts, and
regenerate the skill artifacts (run the docs build/generation job) so the
corrected content flows into network-policies.md; reference the "Network
Policies" header to locate the autogenerated file and include a brief commit
message noting "Revert direct edit — regenerate from docs/source".

In @.agents/skills/nemoclaw-user-reference/references/troubleshooting.md:
- Around line 1-3: Add the missing SPDX metadata header to the top of this
Markdown document by inserting the required SPDX copyright and license lines as
HTML comments (e.g., <!-- SPDX-FileCopyrightText: ... --> and <!--
SPDX-License-Identifier: ... -->) above the "Troubleshooting" title so the file
contains the mandated SPDX header format for Markdown files.

---

Nitpick comments:
In @.agents/skills/nemoclaw-contributor-update-docs/SKILL.md:
- Around line 184-186: Rewrite the note that begins "Do not include the root
`skills/` directory as an output target..." into active voice and place the
entire sentence on a single source line; for example, change passive phrasing
("That directory is refreshed by a separate process and must not be updated by
this skill.") to active voice ("A separate process refreshes the skills/
directory, so this skill must not update it.") and ensure the result is one full
sentence on one line in SKILL.md.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: acad4e69-cfdd-4fcd-8cac-f3077f924a0b

📥 Commits

Reviewing files that changed from the base of the PR and between 5473b40 and 92d8988.

📒 Files selected for processing (33)
  • .agents/skills/nemoclaw-contributor-update-docs/SKILL.md
  • .agents/skills/nemoclaw-user-configure-inference/SKILL.md
  • .agents/skills/nemoclaw-user-configure-inference/references/inference-options.md
  • .agents/skills/nemoclaw-user-configure-inference/references/switch-inference-providers.md
  • .agents/skills/nemoclaw-user-configure-inference/references/tool-calling-reliability.md
  • .agents/skills/nemoclaw-user-configure-security/references/best-practices.md
  • .agents/skills/nemoclaw-user-configure-security/references/credential-storage.md
  • .agents/skills/nemoclaw-user-get-started/SKILL.md
  • .agents/skills/nemoclaw-user-get-started/references/quickstart-hermes.md
  • .agents/skills/nemoclaw-user-manage-policy/references/integration-policy-examples.md
  • .agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md
  • .agents/skills/nemoclaw-user-overview/references/how-it-works.md
  • .agents/skills/nemoclaw-user-reference/references/architecture.md
  • .agents/skills/nemoclaw-user-reference/references/commands.md
  • .agents/skills/nemoclaw-user-reference/references/network-policies.md
  • .agents/skills/nemoclaw-user-reference/references/troubleshooting.md
  • docs/about/how-it-works.mdx
  • docs/get-started/quickstart-hermes.mdx
  • docs/get-started/quickstart.mdx
  • docs/inference/inference-options.mdx
  • docs/inference/switch-inference-providers.mdx
  • docs/inference/tool-calling-reliability.mdx
  • docs/inference/use-local-inference.mdx
  • docs/manage-sandboxes/lifecycle.mdx
  • docs/network-policy/integration-policy-examples.mdx
  • docs/reference/architecture.mdx
  • docs/reference/commands-nemohermes.mdx
  • docs/reference/commands.mdx
  • docs/reference/network-policies.mdx
  • docs/reference/troubleshooting.mdx
  • docs/security/best-practices.mdx
  • docs/security/credential-storage.mdx
  • fern/fern.config.json
✅ Files skipped from review due to trivial changes (10)
  • docs/manage-sandboxes/lifecycle.mdx
  • docs/about/how-it-works.mdx
  • docs/inference/tool-calling-reliability.mdx
  • fern/fern.config.json
  • .agents/skills/nemoclaw-user-configure-inference/SKILL.md
  • .agents/skills/nemoclaw-user-configure-inference/references/tool-calling-reliability.md
  • docs/get-started/quickstart.mdx
  • docs/reference/troubleshooting.mdx
  • .agents/skills/nemoclaw-user-reference/references/architecture.md
  • docs/reference/commands-nemohermes.mdx
🚧 Files skipped from review as they are similar to previous changes (1)
  • .agents/skills/nemoclaw-user-get-started/references/quickstart-hermes.md

|---|---|
| Default | The watcher approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat`. All other clients are rejected and logged. |
| What you can change | This is not a user-facing knob. The allowlist is defined in the entrypoint script. |
| Default | Startup auto-pairing and `connect`-time approval share one policy. NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or `cli`, and only for `operator.pairing`, `operator.read`, and `operator.write` scopes. All other clients or scopes are rejected and logged. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Split into one sentence per line.

Line 428 contains three sentences.
The coding guidelines require one sentence per line in Markdown source to make diffs readable.

Suggested fix
-| Default | Startup auto-pairing and `connect`-time approval share one policy. NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or `cli`, and only for `operator.pairing`, `operator.read`, and `operator.write` scopes. All other clients or scopes are rejected and logged. |
+| Default | Startup auto-pairing and `connect`-time approval share one policy.
+NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or `cli`, and only for `operator.pairing`, `operator.read`, and `operator.write` scopes.
+All other clients or scopes are rejected and logged. |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-configure-security/references/best-practices.md
at line 428, The Markdown table cell text beginning with "Default | Startup
auto-pairing and `connect`-time approval share one policy." contains three
sentences on one line; split it so each sentence lives on its own line in the
same table cell (e.g., one line for "Default | Startup auto-pairing and
`connect`-time approval share one policy.", one line for "NemoClaw approves
devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to
`webchat` or `cli`.", and one line for "It only approves for `operator.pairing`,
`operator.read`, and `operator.write` scopes; all other clients or scopes are
rejected and logged.").

Source: Coding guidelines

|---|---|
| Default | Enabled. The plugin registers a `before_tool_call` hook that scans for 14 high-confidence secret patterns. |
| What it covers | Three classifiers, all enforced through `isMemoryPath()`: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
| What it covers | Three path classifiers, all enforced through `isMemoryPath()`, plus credential-shaped text such as provider API keys, OpenAI project keys with `sk-proj-` prefixes, and Slack app-level `xapp-` tokens. The path classifiers are: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Split into one sentence per line.

Line 465 contains two sentences.
The coding guidelines require one sentence per line in Markdown source to make diffs readable.

Suggested fix
-| What it covers | Three path classifiers, all enforced through `isMemoryPath()`, plus credential-shaped text such as provider API keys, OpenAI project keys with `sk-proj-` prefixes, and Slack app-level `xapp-` tokens. The path classifiers are: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
+| What it covers | Three path classifiers, all enforced through `isMemoryPath()`, plus credential-shaped text such as provider API keys, OpenAI project keys with `sk-proj-` prefixes, and Slack app-level `xapp-` tokens.
+The path classifiers are: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-configure-security/references/best-practices.md
at line 465, The paragraph describing path classifiers and credential patterns
must be split so each sentence is on its own line; update the Markdown around
the isMemoryPath() description so the sentence about three path classifiers and
credential-shaped text is one line and the following sentence enumerating the
three classifiers (referencing MEMORY_PATH_SEGMENTS, MEMORY_BASENAMES, and
MEMORY_RELATIVE_PREFIXES) is on its own line; ensure the three classifier
categories remain intact and keep the symbol names (isMemoryPath(),
MEMORY_PATH_SEGMENTS, MEMORY_BASENAMES, MEMORY_RELATIVE_PREFIXES) unchanged for
clarity.

Source: Coding guidelines

</AgentOnly>
If you intentionally run separate OpenShell gateways on the same host, set a different `NEMOCLAW_GATEWAY_PORT` before each onboarding run.
NemoClaw isolates the gateway name and local state by port so one port-specific gateway does not replace another.
Gateway and dashboard cleanup is scoped by sandbox name and port.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Rewrite passive voice to active voice.

The phrase "Gateway and dashboard cleanup is scoped" uses passive voice. Rewrite to active voice, such as "NemoClaw scopes gateway and dashboard cleanup".

Note: This file is autogenerated from docs/manage-sandboxes/lifecycle.mdx via docs-to-skills.py. The fix should be made in the source docs/ file, not here.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md at line 116, The
sentence in the autogenerated SKILL.md uses passive voice; update the source
docs file docs/manage-sandboxes/lifecycle.mdx to use active voice (e.g., change
"Gateway and dashboard cleanup is scoped by sandbox name and port." to "NemoClaw
scopes gateway and dashboard cleanup by sandbox name and port.") and regenerate
artifacts so the change propagates into
.agents/skills/nemoclaw-user-manage-sandboxes/SKILL.md; edit the lifecycle.mdx
entry where that sentence appears and run docs-to-skills.py to produce the
updated SKILL.md.

Source: Coding guidelines


- The _plugin_ is a TypeScript package that runs with OpenClaw inside the sandbox.
It registers the managed inference provider metadata, the `/nemoclaw` slash command, and runtime context hooks.
Runtime context is prepended as system guidance, so sandbox and policy instructions stay active without appearing in the visible chat transcript.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Rewrite passive voice to active voice.

The phrase "Runtime context is prepended" uses passive voice. Rewrite to active voice, such as "The plugin prepends runtime context".

Note: This file is autogenerated from docs/about/how-it-works.mdx via docs-to-skills.py. The fix should be made in the source docs/ file, not here.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.agents/skills/nemoclaw-user-overview/references/how-it-works.md at line 68,
Change the passive sentence "Runtime context is prepended as system guidance, so
sandbox and policy instructions stay active without appearing in the visible
chat transcript." in the source docs file to active voice (e.g., "The plugin
prepends runtime context as system guidance, so sandbox and policy instructions
stay active without appearing in the visible chat transcript."); make the edit
in docs/about/how-it-works.mdx (not the autogenerated .agents/... file) and keep
the rest of the sentence meaning intact.

Source: Coding guidelines

| `NEMOCLAW_INSTALL_REF` | git ref | For internal installer commands: the git ref to install from. Overridden by the `--install-ref` flag. |
| `NEMOCLAW_INSTALL_TAG` | release tag | For internal installer commands: the release tag to install. Defaults to the admin-promoted `lkg` tag when unset. Overridden by the `--install-tag` flag. |
| `NEMOCLAW_VLLM_MODEL` | registry slug or Hugging Face model id | Selects the model the managed-vLLM install path serves. Recognised slugs: `deepseek-v4-flash`, `qwen3.6-27b`, `qwen3.6-35b-a3b-nvfp4`, `nemotron-3-nano-4b`, `deepseek-r1-distill-70b`. Unset uses the per-platform profile default. Gated models (e.g. `deepseek-r1-distill-70b`) require `HF_TOKEN` or `HUGGING_FACE_HUB_TOKEN`. |
| `NEMOCLAW_MINIMAL_BOOTSTRAP` | `1` to enable | Skips default OpenClaw workspace-template seeding for new pristine workspaces. Existing files are not deleted; see [Runtime Controls](../manage-sandboxes/runtime-controls). |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Rewrite passive voice to active voice.

The phrase "Existing files are not deleted" uses passive voice. Rewrite to active voice.

Suggested rewrite
-| `NEMOCLAW_MINIMAL_BOOTSTRAP` | `1` to enable | Skips default OpenClaw workspace-template seeding for new pristine workspaces. Existing files are not deleted; see [Runtime Controls](../manage-sandboxes/runtime-controls). |
+| `NEMOCLAW_MINIMAL_BOOTSTRAP` | `1` to enable | Skips default OpenClaw workspace-template seeding for new pristine workspaces. NemoClaw does not delete existing files; see [Runtime Controls](../manage-sandboxes/runtime-controls). |
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
| `NEMOCLAW_MINIMAL_BOOTSTRAP` | `1` to enable | Skips default OpenClaw workspace-template seeding for new pristine workspaces. Existing files are not deleted; see [Runtime Controls](../manage-sandboxes/runtime-controls). |
| `NEMOCLAW_MINIMAL_BOOTSTRAP` | `1` to enable | Skips default OpenClaw workspace-template seeding for new pristine workspaces. NemoClaw does not delete existing files; see [Runtime Controls](../manage-sandboxes/runtime-controls). |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/reference/commands.mdx` at line 1819, Update the passive phrase in the
table row for NEMOCLAW_MINIMAL_BOOTSTRAP so it uses active voice: replace
"Existing files are not deleted" with an active construction such as "This
setting does not delete existing files" (or "It does not delete existing files")
in the description cell for NEMOCLAW_MINIMAL_BOOTSTRAP to convey the same
meaning in active voice.

Source: Coding guidelines

|---|---|
| Default | The watcher approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat`. All other clients are rejected and logged. |
| What you can change | This is not a user-facing knob. The allowlist is defined in the entrypoint script. |
| Default | Startup auto-pairing and `connect`-time approval share one policy. NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or `cli`, and only for `operator.pairing`, `operator.read`, and `operator.write` scopes. All other clients or scopes are rejected and logged. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Split into one sentence per line.

Line 453 contains three sentences.
As per coding guidelines, Markdown source should use one sentence per line to make diffs readable.

Suggested fix
-| Default | Startup auto-pairing and `connect`-time approval share one policy. NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or `cli`, and only for `operator.pairing`, `operator.read`, and `operator.write` scopes. All other clients or scopes are rejected and logged. |
+| Default | Startup auto-pairing and `connect`-time approval share one policy.
+NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or `clientMode` set to `webchat` or `cli`, and only for `operator.pairing`, `operator.read`, and `operator.write` scopes.
+All other clients or scopes are rejected and logged. |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/security/best-practices.mdx` at line 453, The table cell containing
"Default | Startup auto-pairing and `connect`-time approval share one policy.
NemoClaw approves devices with `clientId` set to `openclaw-control-ui` or
`clientMode` set to `webchat` or `cli`, and only for `operator.pairing`,
`operator.read`, and `operator.write` scopes. All other clients or scopes are
rejected and logged." should be split so each sentence is on its own source
line; edit the table row (the cell after the first pipe) so the three sentences
appear on three separate lines (keeping the leading "Default |" and any required
pipe separators intact) — ensure you preserve escaping/backticks and punctuation
exactly while breaking the single-line cell into three lines.

Source: Coding guidelines

|---|---|
| Default | Enabled. The plugin registers a `before_tool_call` hook that scans for 14 high-confidence secret patterns. |
| What it covers | Three classifiers, all enforced through `isMemoryPath()`: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
| What it covers | Three path classifiers, all enforced through `isMemoryPath()`, plus credential-shaped text such as provider API keys, OpenAI project keys with `sk-proj-` prefixes, and Slack app-level `xapp-` tokens. The path classifiers are: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Split into one sentence per line.

Line 490 contains two sentences.
As per coding guidelines, Markdown source should use one sentence per line to make diffs readable.

Suggested fix
-| What it covers | Three path classifiers, all enforced through `isMemoryPath()`, plus credential-shaped text such as provider API keys, OpenAI project keys with `sk-proj-` prefixes, and Slack app-level `xapp-` tokens. The path classifiers are: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
+| What it covers | Three path classifiers, all enforced through `isMemoryPath()`, plus credential-shaped text such as provider API keys, OpenAI project keys with `sk-proj-` prefixes, and Slack app-level `xapp-` tokens.
+The path classifiers are: (1) absolute `MEMORY_PATH_SEGMENTS` such as `/.openclaw/memory/`, `/.openclaw/workspace/`, `/.openclaw/agents/`, `/.openclaw/skills/`, `/.openclaw/hooks/`, `/.openclaw/credentials/`, `/.openclaw/openclaw.json`, `/.nemoclaw/`; (2) canonical workspace basenames in `MEMORY_BASENAMES` (`IDENTITY.md`, `MEMORY.md`, `SOUL.md`, `USER.md`, `AGENTS.md`) matched regardless of the surrounding path; and (3) lexically-normalized workspace-relative writes matching `MEMORY_RELATIVE_PREFIXES` (`.openclaw/`, `.nemoclaw/`, `memory/`) or named workspace daily memory paths, for embedded-fallback mode where the host's path resolver is unavailable. |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/security/best-practices.mdx` at line 490, The paragraph on memory path
classifiers is two sentences and needs to be split so each sentence is on its
own Markdown line; edit the line containing the descriptions of isMemoryPath(),
MEMORY_PATH_SEGMENTS, MEMORY_BASENAMES, and MEMORY_RELATIVE_PREFIXES so that
each sentence becomes a separate line (i.e., break after the first sentence
describing what it covers and then break the long sentence that lists the three
classifiers into its own line), preserving the exact identifiers and examples
(`isMemoryPath()`, `MEMORY_PATH_SEGMENTS`, `MEMORY_BASENAMES`,
`MEMORY_RELATIVE_PREFIXES`, and the example paths/basenames).

Source: Coding guidelines

@miyoungc miyoungc merged commit 1f0b4c5 into main Jun 6, 2026
29 checks passed
@miyoungc miyoungc deleted the docs/v0.0.60-release-notes branch June 6, 2026 02:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build area: skills Skills, agent behaviors, prompts, or skill packaging v0.0.61 Release target

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants