push-skills
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local bash scripts located in
/home/podhi/.openclaw/workspace/scripts/to synchronize files and distribute updates. It also uses standard Git commands (git pull,git add,git commit,git push) to manage the repository state. - [DATA_EXFILTRATION]: Facilitates the transfer of local files from
~/.openclaw/skills/to theitsAR-VR/goatedskillsrepository on GitHub. This operation is the core functionality of the skill and targets a repository belonging to the vendor. - [CREDENTIALS_UNSAFE]: The troubleshooting section mentions SSH keys (
~/.ssh/id_ed25519) in the context of manual user-driven fixes for Git authentication issues. The skill does not programmatically access, read, or transmit these credentials.
Audit Metadata