openclaw-maintainer

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands for git operations, GitHub CLI (gh), and package management (pnpm). These include git worktree, git rebase, gh pr merge, and pnpm install/test/build within the context of a local development environment (~/Development/openclaw).
  • [EXTERNAL_DOWNLOADS]: The skill uses pnpm install and git fetch to download dependencies and repository updates from official registries and the configured GitHub remote. These are standard development operations for the intended purpose of the skill.
  • [DATA_EXPOSURE]: The skill reads GitHub metadata, PR diffs, and local review artifacts (.local/*.md) to coordinate work between subagents. This data is handled locally within the specified worktree environment.
  • [PRIVILEGE_ESCALATION]: The skill enforces a strict 'no push to main' policy, requiring all code changes to be merged via gh pr merge --squash after passing automated gates (lint, build, tests). It also implements identity-aware commenting to prevent the agent from interacting with its own contributions inappropriately.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 11:18 PM