openclaw-persona-forge
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill runs a local Python script (
gacha.py) to generate randomized character traits. This script is bundled with the skill and performs its own input validation to ensure parameters are safe. - [SAFE]: The skill manages the creation of persona files (
SOUL.mdandIDENTITY.md) and includes logic to sanitize character names into safe filename strings, mitigating potential path traversal or injection risks. - [EXTERNAL_DOWNLOADS]: The skill references the use of external image generation tools but delegates this task to pre-existing, audited skills within the user's environment rather than making direct network requests.
Audit Metadata