openclaw-persona-forge
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a locally bundled Python script (
gacha.py) and a shell wrapper (gacha.sh) to generate random character traits. This execution is limited to internal logic and does not involve external data. - [SAFE]: File creation activities involve generating
SOUL.mdandIDENTITY.mdbased on user-guided persona creation, which is the primary intended function of the skill. - [SAFE]: Temporary files for image generation prompts are written to
/tmpwith basic character filtering for filenames to prevent potential path traversal issues during the optional image generation phase.
Audit Metadata