system-watchdog

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script check.sh executes standard macOS system utilities (sysctl, vm_stat, df, ps) to gather telemetry. These commands are used for their intended purpose of resource monitoring.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverified external downloads were identified. The skill operates entirely on local system data.
  • [DATA_EXFILTRATION]: The skill gathers system performance metrics but does not access sensitive files (like credentials or SSH keys) or perform any network operations to send data externally.
  • [PROMPT_INJECTION]: The instructions provided to the agent in SKILL.md and openclaw-cron.json are focused on task execution and output formatting without attempting to bypass safety filters or override core behavior.
  • [DYNAMIC_EXECUTION]: The check.sh file uses a heredoc to execute an embedded Python script. This is a standard method for ensuring cross-environment compatibility for JSON processing and does not involve executing untrusted or externally sourced code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 12:34 AM