misteye-security-check
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's security API (app-api.misteye.io) to perform risk assessments on URLs, domains, and software packages.
- [EXTERNAL_DOWNLOADS]: It periodically checks for updates to its own rule set by fetching version metadata from the official repository at github.com/slowmist/misteye-skills.
- [COMMAND_EXECUTION]: Includes instructions for the agent to establish scheduled tasks (crons) via the OpenClaw and Hermes management tools to perform recurring security patrols.
- [COMMAND_EXECUTION]: Provides guidance on secure credential management for the required API key, recommending the use of environment variables and the application of restricted file permissions (chmod 600).
- [DATA_EXFILTRATION]: Scans local project configuration files (such as package.json, requirements.txt, and go.mod) to extract dependency metadata for submission to the security verification API.
Audit Metadata