byted-security-clawsentry
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONOBFUSCATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a helper script (bundle.js) to interact with the OpenClaw CLI for configuration management, package installation, and service restarts. Additionally, the agent is instructed to perform process monitoring using system commands like 'ps aux' to verify the success of the background authentication flow.
- [EXTERNAL_DOWNLOADS]: The skill triggers the installation of the official security plugin '@omni-shield/ai-assistant-security-openclaw' from a remote package registry as part of the setup process.
- [DATA_EXFILTRATION]: To facilitate identity management and license verification, the skill collects a unique machine identifier (device fingerprint) using a bundled system utility. This identifier is transmitted to the vendor's authentication endpoint at 'omini-shield.com' to generate a valid login token for the user.
- [OBFUSCATION]: The script 'scripts/bundle.js' is a bundled and minified JavaScript file. While this complicates manual source code review, it appears to contain standard cryptographic and machine identification libraries required for the tool's stated security and authentication functions.
Audit Metadata