openclaw-messaging
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing the
openclawCLI tool to perform messaging and agent-to-agent coordination. - [DATA_EXFILTRATION]: The skill facilitates sending messages and files to external messaging services. This is the intended and documented purpose of the skill.
- [PROMPT_INJECTION]: The inclusion of the
openclaw message readcommand allows the agent to ingest content from external communication channels, creating a surface for indirect prompt injection. - Ingestion points:
openclaw message readcommands withinSKILL.md. - Boundary markers: The provided examples do not include delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill has access to the
openclawCLI for sending messages and initiating agent sessions. - Sanitization: No sanitization steps for external message content are described in the skill.
Audit Metadata