clawsweeper
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages a specific repository-based bot. All shell commands are standard development workflows (git status, pnpm build, gh workflow run) executed within a local project directory (
~/Projects/clawsweeper). - [SAFE]: Credential management refers to environment variables (
CLAWSWEEPER_APP_PRIVATE_KEY) expected to be used within the user's secure CI environment (GitHub Actions) rather than being hardcoded or exfiltrated by the skill. - [SAFE]: The network operations are limited to official GitHub API calls via the
ghCLI and git operations to the project's own repository (openclaw/clawsweeper). - [SAFE]: The instructions include explicit security boundaries, directing the user to route sensitive security issues (like RCE or credential leaks) to central handling rather than through this automation tool.
Audit Metadata