openclaw-testing
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running various local build, test, and maintenance commands using
pnpm,git, and custom repository scripts such asscripts/test-docker-all.mjs.\n- [EXTERNAL_DOWNLOADS]: It interacts with GitHub Actions via theghCLI to inspect CI run statuses and logs, and references pulling container images from the GitHub Container Registry (ghcr.io).\n- [DATA_EXFILTRATION]: The skill describes a release evidence workflow where run IDs and summaries are recorded in a private evidence ledger repository (openclaw/releases-private). This is a documented administrative procedure for the project.\n- [CREDENTIALS_UNSAFE]: It references the use of environment-configured authentication tokens (e.g.,OPENCLAW_RELEASES_PRIVATE_DISPATCH_TOKEN) for workflow dispatches, which follows standard and secure CI/CD automation practices.
Audit Metadata