system-watchdog
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
check.shexecutes standard macOS system utilities (sysctl,vm_stat,df,ps) to gather telemetry. These commands are used for their intended purpose of resource monitoring. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverified external downloads were identified. The skill operates entirely on local system data.
- [DATA_EXFILTRATION]: The skill gathers system performance metrics but does not access sensitive files (like credentials or SSH keys) or perform any network operations to send data externally.
- [PROMPT_INJECTION]: The instructions provided to the agent in
SKILL.mdandopenclaw-cron.jsonare focused on task execution and output formatting without attempting to bypass safety filters or override core behavior. - [DYNAMIC_EXECUTION]: The
check.shfile uses a heredoc to execute an embedded Python script. This is a standard method for ensuring cross-environment compatibility for JSON processing and does not involve executing untrusted or externally sourced code.
Audit Metadata