config-guardian
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages system configurations through local shell scripts (
backup_config.sh,restore_config.sh, etc.) that interact with theopenclawCLI tool. These operations are restricted to the local environment and the application's specific configuration directory.- [PROMPT_INJECTION]: Guardrails defined inSKILL.mdexplicitly instruct the agent to seek user approval before restarting services or applying changes, effectively mitigating the risk of unauthorized or accidental system modifications.- [SAFE]: Thevalidate_config.shscript implements defensive measures by checking for the presence of dangerous keywords like 'sudo', 'exec', or 'shell' within the configuration data. It also performs consistency checks on model configurations using embedded Python logic, ensuring the integrity of the setup before deployment.
Audit Metadata