openclaw-release-ci

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the GitHub CLI (gh) to interact with repository workflows, monitor run statuses, and retrieve logs.
  • [COMMAND_EXECUTION]: Local Node.js scripts (verify-provider-secrets.mjs and release-ci-summary.mjs) are used to automate pre-release validation steps and process CI data.
  • [EXTERNAL_DOWNLOADS]: The script verify-provider-secrets.mjs performs network requests to official endpoints of AI providers (OpenAI, Anthropic, Fireworks, and OpenRouter) to validate that API keys are active before starting expensive CI runs.
  • [EXTERNAL_DOWNLOADS]: The skill fetches metadata and status information from the GitHub API using the authenticated gh tool.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 03:47 PM
Security Audit — agent-trust-hub — openclaw-release-ci