Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent rent-comparison helper, with the main caution that it may save property and rent reports locally.
Before installing, confirm you are comfortable with the skill looking up property records in the OpenClaw shared properties file, searching rental listing sites, and saving reports that may include addresses, current rent, and renewal recommendations. Review or delete saved reports if those details should not persist locally, and verify current Massachusetts legal requirements before relying on the rent-increase notes.
The description says to use the skill when a user asks about "rent pricing," "market rent," or "what to charge for rent," which are broad phrases that can appear in general conversation and are not tightly scoped to this specific skill. The file also does not provide exclusion conditions or negative examples to clarify when the skill should not activate.
The skill directs the agent to save property and rent analysis to a local path without notifying the user, creating undisclosed storage of potentially sensitive operational data. Because the report may include exact property addresses, current rent, renewal strategy, and comparable listings, silent persistence increases privacy, data retention, and unintended disclosure risk if the workspace is later accessed by other tools, users, or sessions.
The skill instructs the agent to write a full comps report to a workspace file, which goes beyond purely analytical behavior and creates an unannounced persistence side effect. Even if the content is business-related, it can store addresses, rent figures, tenant-related context, and market analysis on disk without explicit user consent or retention controls.
