awesome-openclaw-skills
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The documentation provides best-practice guidance for managing sensitive credentials. It explicitly instructs users not to hardcode secrets and recommends using environment variables or
.envfiles for tokens likeGITHUB_TOKENorOPENAI_API_KEY. - [COMMAND_EXECUTION]: The file contains documentation and example code in Bash, Python, and Node.js for automating skill discovery. These scripts demonstrate how to parse markdown files and execute commands via
subprocess.runor shell loops. These are presented as instructional templates for the user. - [EXTERNAL_DOWNLOADS]: The skill references external repositories on GitHub (
github.com/openclaw,github.com/VoltAgent) and recommends installing administrative CLI tools from the npm registry (@openclaw/clawhub-cli,@snyk/agent-scan). These downloads are integral to the stated purpose of managing the OpenClaw environment. - [SAFE]: The skill includes sections on security best practices, encouraging users to review source code, check VirusTotal reports, and audit permissions before installing third-party extensions.
Audit Metadata