openclaw-config-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a read-only configuration advisor that handles sensitive data securely. It uses regular expressions to identify potential secrets such as API keys and tokens in configuration files, but it explicitly avoids displaying or logging the secret values, only notifying the user of their location.
- [SAFE]: File system access is narrowly scoped to configuration file extensions (.json, .yaml, .toml, .env, .conf) and is protected by resource constraints, including a maximum of 80 files and a 512KB size limit per file, which prevents resource exhaustion or broad data harvesting attacks.
- [SAFE]: State management is handled through a local YAML file in a dedicated project directory (~/.openclaw), following standard practices for stateful agent tools without attempting unauthorized persistence or privilege escalation.
Audit Metadata