byted-openclaw-diag
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
exectool to run a local bash script,scripts/byted-openclaw-diag.sh, which implements the diagnostic logic and log parsing. - [PRIVILEGE_ESCALATION]: In its "advanced mode," the skill has the ability to modify the
openclaw.jsonsystem configuration file and restart theopenclaw gatewayservice to enable debug logging. While these are administrative actions, they are explicitly associated with the tool's diagnostic purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from system log files and user session files, which could potentially contain instructions from past interactions.
- Ingestion points: Logs and session files located in
/tmp/openclaw/and~/.openclaw/agents/. - Boundary markers: The
SKILL.mdinstructions include a "Direct Output Mode" that prevents the agent from summarizing the results, thereby reducing the risk of the log content influencing the agent's behavior. - Capability inventory: The skill has
execandreadpermissions. - Sanitization: The script uses Python for structured JSON parsing and includes a step to remove ANSI color codes using
sed. - [DYNAMIC_EXECUTION]: The bash script uses
python3 -cto execute inline code for processing JSON data and calculating metrics during execution.
Audit Metadata