openclaw-ghsa-maintainer
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements safety protocols by requiring the agent to read
SECURITY.mdand obtain explicit user permission before performing any publishing actions. - [SAFE]: Network operations are restricted to trusted and well-known services (GitHub API and npm registry) for legitimate maintenance purposes.
- [SAFE]: The use of
jqfor constructing JSON payloads is a security best practice that prevents shell injection and ensures the integrity of the data sent to the GitHub API. - [SAFE]: Sensitive data handling is improved by using
mktempfor temporary files and a clean--userconfigfor npm commands, ensuring that the agent does not inadvertently expose or rely on local configuration files. - [SAFE]: The workflow includes verification steps after execution to confirm the state of the advisory and the correctness of the published content.
Audit Metadata