openclaw-behavior-validator
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill functions by interacting with external environments (web apps, APIs, CLI tools) and ingesting their output for analysis. This creates a surface for indirect prompt injection where an external system could return malicious instructions aimed at overriding the agent's logic.
- Ingestion points: External content is ingested via network requests (URLs/APIs) and shell output (CLI tools) as defined in the behavior contract.
- Boundary markers: The skill recommends using a structured JSON report format and redacting evidence to maintain data integrity.
- Capability inventory: The skill workflow requires capabilities for network communication, local file system manipulation (via mktemp), and shell execution to test targets.
- Sanitization: The instructions explicitly mandate the redaction of sensitive tokens and credentials from all captured evidence and final reports.
Audit Metadata