role-configurator 安全扫描报告 — 可信 | ClawSafe

5 /100

role-configurator

OpenClaw Role Configurator - 15 preset role templates for AI assistant role configuration

Legitimate role configuration tool with no malicious behavior - performs only documented file operations for AI assistant role setup.

技能名称role-configurator

分析耗时38.6s

引擎pi

✓

可以安装

Skill is safe to use. No security concerns identified.

安全发现 1 项

严重性	安全发现	位置
提示	Configurable workspace path The skill reads OPENCLAW_WORKSPACE environment variable to determine where to write SOUL.md. Default is /root/.openclaw/workspace. `workspace = os.environ.get("OPENCLAW_WORKSPACE", "/root/.openclaw/workspace")` → This is documented and expected behavior for a role configuration tool. No action needed.	`scripts/config_writer.py:11`

资源类型	声明权限	推断权限	状态	证据
文件系统	`WRITE`	`WRITE`	✓ 一致	scripts/config_writer.py:26 writes SOUL.md
环境变量	`READ`	`READ`	✓ 一致	scripts/config_writer.py:11 reads OPENCLAW_WORKSPACE
网络访问	`NONE`	`NONE`	—	No network calls in any script
命令执行	`NONE`	`NONE`	—	No subprocess or shell execution

8 文件 · 24.1 KB · 656 行

Markdown 2f · 279L JSON 3f · 227L Python 3f · 150L

├─ ▾ 📁 data

│ ├─ 📋 role_templates.json JSON 109L · 8.7 KB

│ └─ 📋 skill_recommendations.json JSON 109L · 2.0 KB

├─ ▾ 📁 scripts

│ ├─ 🐍 config_writer.py Python 61L · 1.5 KB

│ ├─ 🐍 skill_recommender.py Python 42L · 1.3 KB

│ └─ 🐍 template_manager.py Python 47L · 1.3 KB

├─ 📋 _meta.json JSON 9L · 545 B

├─ 📝 README.md Markdown 73L · 2.6 KB

└─ 📝 SKILL.md Markdown 206L · 6.3 KB

✓ No network requests or external IP communications

✓ No shell execution or subprocess calls

✓ No credential harvesting or sensitive path access (~/.ssh, ~/.aws, .env)

✓ No obfuscated code or base64 payloads

✓ No hidden functionality - all operations match documentation

✓ Simple, readable code with no complexity

✓ All file operations are local and documented

✓ No remote script execution (curl|bash, wget|sh)