openclaw-traffic-guardian
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the provided skill files. The skill correctly handles sensitive data by mandating redaction in its implementation specification.
- [REMOTE_CODE_EXECUTION]: The
SKILL.mdfile contains a shell script for verifying release artifacts. This script downloads assets from the official project repository on GitHub (prompt-security/clawsec) and performs cryptographic signature and hash verification usingopensslandsha256sum. This is a security best practice implemented to ensure the integrity of the skill's components. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to monitor external network traffic, which is an untrusted data source. The implementation specification in
SPEC.mdprovides a mandatory evidence chain for mitigating this risk, requiring snippet redaction, pattern-based detection for injection attacks, and strict schema validation for all findings.
Audit Metadata