config-safe
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes the vendor-provided
openclawCLI tool to perform administrative operations, including retrieving current configurations (config.get) and applying updates (config.patch,config.apply). - [COMMAND_EXECUTION]: Reads local files using the
catcommand to access documentation and configuration data located in standard installation paths (e.g.,/opt/homebrew/lib/node_modules/openclaw/docs/). - [DATA_EXPOSURE]: Accesses system configuration data via the CLI. The skill includes specific instructions to mask sensitive credentials, such as bot tokens, during the preview process to prevent accidental exposure in the chat history.
- [SAFE]: The skill implements a 'verify-and-confirm' logic that prevents direct modification of configurations without manual user intervention, effectively mitigating the risk of accidental system instability.
Audit Metadata