Trusted — Risk Score 5/100
Last scan:2 days ago Rescan
5 /100
role-configurator
OpenClaw Role Configurator - 15 preset role templates for AI assistant role configuration
Legitimate role configuration tool with no malicious behavior - performs only documented file operations for AI assistant role setup.
Skill Namerole-configurator
Duration38.6s
Enginepi
Safe to install
Skill is safe to use. No security concerns identified.

Findings 1 items

Severity Finding Location
Info
Configurable workspace path
The skill reads OPENCLAW_WORKSPACE environment variable to determine where to write SOUL.md. Default is /root/.openclaw/workspace.
workspace = os.environ.get("OPENCLAW_WORKSPACE", "/root/.openclaw/workspace")
→ This is documented and expected behavior for a role configuration tool. No action needed.
scripts/config_writer.py:11
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned scripts/config_writer.py:26 writes SOUL.md
Environment READ READ ✓ Aligned scripts/config_writer.py:11 reads OPENCLAW_WORKSPACE
Network NONE NONE No network calls in any script
Shell NONE NONE No subprocess or shell execution

File Tree

8 files · 24.1 KB · 656 lines
Markdown 2f · 279L JSON 3f · 227L Python 3f · 150L
├─ 📁 data
│ ├─ 📋 role_templates.json JSON 109L · 8.7 KB
│ └─ 📋 skill_recommendations.json JSON 109L · 2.0 KB
├─ 📁 scripts
│ ├─ 🐍 config_writer.py Python 61L · 1.5 KB
│ ├─ 🐍 skill_recommender.py Python 42L · 1.3 KB
│ └─ 🐍 template_manager.py Python 47L · 1.3 KB
├─ 📋 _meta.json JSON 9L · 545 B
├─ 📝 README.md Markdown 73L · 2.6 KB
└─ 📝 SKILL.md Markdown 206L · 6.3 KB

Security Positives

✓ No network requests or external IP communications
✓ No shell execution or subprocess calls
✓ No credential harvesting or sensitive path access (~/.ssh, ~/.aws, .env)
✓ No obfuscated code or base64 payloads
✓ No hidden functionality - all operations match documentation
✓ Simple, readable code with no complexity
✓ All file operations are local and documented
✓ No remote script execution (curl|bash, wget|sh)