The ops user owns and runs the Skill API on the agent server, handling ringfenced SQL execution isolated from the OpenClaw agent service.