dfir

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of forensic tools like Volatility and Autopsy through the openclaw.dfir.run_volatility and openclaw.dfir.run_autopsy methods.
  • These commands are intended for authorized forensic investigations and incident response actions.
  • The documentation includes guidance on secure file path handling and input validation to prevent command injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 10:46 PM