Scan Report
5 /100
role-configurator
OpenClaw Role Configurator - 15 preset role templates for AI assistant role configuration
Legitimate role configuration tool with no malicious behavior - performs only documented file operations for AI assistant role setup.
Safe to install
Skill is safe to use. No security concerns identified.
Findings 1 items
| Severity | Finding | Location |
|---|---|---|
| Info | Configurable workspace path | scripts/config_writer.py:11 |
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | scripts/config_writer.py:26 writes SOUL.md |
| Environment | READ | READ | ✓ Aligned | scripts/config_writer.py:11 reads OPENCLAW_WORKSPACE |
| Network | NONE | NONE | — | No network calls in any script |
| Shell | NONE | NONE | — | No subprocess or shell execution |
File Tree
8 files · 24.1 KB · 656 lines Markdown 2f · 279L
JSON 3f · 227L
Python 3f · 150L
├─
▾
data
│ ├─
role_templates.json
JSON
│ └─
skill_recommendations.json
JSON
├─
▾
scripts
│ ├─
config_writer.py
Python
│ ├─
skill_recommender.py
Python
│ └─
template_manager.py
Python
├─
_meta.json
JSON
├─
README.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ No network requests or external IP communications
✓ No shell execution or subprocess calls
✓ No credential harvesting or sensitive path access (~/.ssh, ~/.aws, .env)
✓ No obfuscated code or base64 payloads
✓ No hidden functionality - all operations match documentation
✓ Simple, readable code with no complexity
✓ All file operations are local and documented
✓ No remote script execution (curl|bash, wget|sh)