openclaw-parallels-smoke
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system commands and shell scripting (prlctl, pnpm, npm, apt-get, timeout) to automate virtual machine management and testing. It includes administrative operations such as using sudo for authentication on macOS and sourcing the user's shell profile (~/.profile) to load credentials. These actions are necessary for the skill's stated purpose.\n- [EXTERNAL_DOWNLOADS]: Software is installed using standard package managers (npm, pnpm, apt-get) from official sources, which is expected behavior for setting up a test environment.\n- [SAFE]: The skill's behavior aligns with its described purpose of managing smoke tests for the OpenClaw project. It includes safety-oriented instructions to avoid exposing sensitive environment variables. While the skill processes external data such as VM logs, which presents a surface for indirect prompt injection, this is managed within a standard development testing context.
Audit Metadata