btpanel
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The diagnostic script
scripts/check_env.pyutilizessubprocess.runto verify Python version information and binary paths usingwhichorwhere. These calls are restricted to a safe, hardcoded list of diagnostic commands.\n- [SAFE]: The skill correctly handles sensitive API tokens by storing them in a local YAML configuration file (~/.openclaw/bt-skills.yaml) rather than hardcoding them in scripts.\n- [SAFE]: All network operations are directed to server hosts explicitly configured by the user via thebt-config.pyutility. There are no unauthorized external connections or data exfiltration patterns.\n- [SAFE]: The use of__import__in environment checks is restricted to verifying that required dependencies likerequestsandpyyamlare installed.\n- [SAFE]: The skill instructions inSKILL.mdinclude appropriate safety guidelines for the AI, emphasizing data neutrality and user notification before command execution.
Audit Metadata