openclaw-runtime-git

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard git and gh (GitHub CLI) commands for repository management, including cloning, initializing submodules, and pushing changes. These operations are restricted to the ~/.openclaw/ directory.
  • [EXTERNAL_DOWNLOADS]: Repository and submodule synchronization involves downloading content from the author's official GitHub organization (delorenj). These are standard development operations.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The documented use of command git to bypass a local hook is a standard technique for managing submodule pointers without triggering pre-commit hooks designed for regular file contents.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 06:19 PM
Security Audit — agent-trust-hub — openclaw-runtime-git