openclaw-custom-build-validation
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of system commands including
git,gh(GitHub CLI),ocm(OpenClaw Manager), and project-specific build scripts to perform validation tasks. These are executed vianode:child_processin helper scripts. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from consumer repositories, including PR code and build instructions. This creates an attack surface for indirect prompt injection, which the skill mitigates through mandated process isolation (Crabbox/OCM) and human review of generated reports.
- Ingestion points: Processes repository instructions, build scripts, and PR commits as specified in
SKILL.mdandreferences/patch-refresh.md. - Boundary markers: Relies on operator review and environment isolation rather than explicit programmatic prompt delimiters.
- Capability inventory: Possesses capabilities to execute shell commands, manage local services via OCM, and interact with the GitHub API via the
ghCLI. - Sanitization: Implements sanitization for Markdown exports and requires human verification of publication drafts as described in
references/reporting.md. - [EXTERNAL_DOWNLOADS]: The
scripts/check-update.mjsutility performs read-only network requests to the vendor's repository (github.com/TheAngryPit/TheAngrySkills) via the GitHub CLI to verify the skill's version status.
Audit Metadata