dfir
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of forensic tools like Volatility and Autopsy through the
openclaw.dfir.run_volatilityandopenclaw.dfir.run_autopsymethods. - These commands are intended for authorized forensic investigations and incident response actions.
- The documentation includes guidance on secure file path handling and input validation to prevent command injection risks.
Audit Metadata