openclaw-release-ci
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) to interact with repository workflows, monitor run statuses, and retrieve logs. - [COMMAND_EXECUTION]: Local Node.js scripts (
verify-provider-secrets.mjsandrelease-ci-summary.mjs) are used to automate pre-release validation steps and process CI data. - [EXTERNAL_DOWNLOADS]: The script
verify-provider-secrets.mjsperforms network requests to official endpoints of AI providers (OpenAI, Anthropic, Fireworks, and OpenRouter) to validate that API keys are active before starting expensive CI runs. - [EXTERNAL_DOWNLOADS]: The skill fetches metadata and status information from the GitHub API using the authenticated
ghtool.
Audit Metadata