Security audit
Security checks for vulnerabilities and agentic risk
This skill exports the user's own ChatGPT history to local files with disclosed consent checks, local-only outputs, and scoped cleanup behavior.
Install only if you are comfortable letting the skill use your logged-in ChatGPT browser session to create plaintext local copies of your conversations. Prefer index-only mode unless you need message text, keep exports out of synced folders, and delete them with the documented purge command when finished.
This is another true documentation-to-behavior mismatch affecting the core purpose of the skill. If the shipped code chunk is only cleanup/vetting and not export functionality, users and orchestrators may grant powerful permissions and run the skill under false assumptions about what it can safely do, which is dangerous for a tool handling sensitive ChatGPT history.
This is another true documentation-to-behavior mismatch affecting the core purpose of the skill. If the shipped code chunk is only cleanup/vetting and not export functionality, users and orchestrators may grant powerful permissions and run the skill under false assumptions about what it can safely do, which is dangerous for a tool handling sensitive ChatGPT history.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
---
name: chatgpt-exporter
version: 1.9.2
description: "Export your ChatGPT conversations to local files — titles, timestamps and, if you ask for it, full message text. Built for the TinkerClaw fork — github.com/globalcaos/tinkerclaw. Invoke it BY NAME — \"chatgpt-exporter-ultimate: export my conversations\" — so ordinary talk about ChatGPT cannot trigger it. Rides the ChatGPT session your browser already holds — browser relay or a bookmarklet you paste yourself. It reads NO access token, no cookie jar and no credential file. The relay enumerates your conversation list and writes JSON and Markdown copies to a private directory; it defaults to index-only (titles and timestamps, no message text) and refuses to run without an explicit confirmation of destination and scope. The bookmarklet can also find conversations inside Projects, by running searches against your history, and downloads one JSON file after three dialogs. Relay destinations are resolved through symlinks before anything is written, so a relay export cannot land in a synced folder, a git repo or outside your home, and a symlink or hard link left inside a reused export directory is refused instead of written through. A validated --purge deletes an export again. Off switch documented in the skill."
metadata:
openclaw:
permissions:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
---
name: chatgpt-exporter
version: 1.9.2
description: "Export your ChatGPT conversations to local files — titles, timestamps and, if you ask for it, full message text. Built for the TinkerClaw fork — github.com/globalcaos/tinkerclaw. Invoke it BY NAME — \"chatgpt-exporter-ultimate: export my conversations\" — so ordinary talk about ChatGPT cannot trigger it. Rides the ChatGPT session your browser already holds — browser relay or a bookmarklet you paste yourself. It reads NO access token, no cookie jar and no credential file. The relay enumerates your conversation list and writes JSON and Markdown copies to a private directory; it defaults to index-only (titles and timestamps, no message text) and refuses to run without an explicit confirmation of destination and scope. The bookmarklet can also find conversations inside Projects, by running searches against your history, and downloads one JSON file after three dialogs. Relay destinations are resolved through symlinks before anything is written, so a relay export cannot land in a synced folder, a git repo or outside your home, and a symlink or hard link left inside a reused export directory is refused instead of written through. A validated --purge deletes an export again. Off switch documented in the skill."
metadata:
openclaw:
permissions:
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
ze a destination or a purge target; and coreutils (date, du, head, rm). scripts/export.sh makes NO network calls at all — it neither fetches nor authenticates.
Referenced artifact was not completely inspected
(19 cases, incl. symlink bypasses and the removed overrides) and scripts/relay-selftest.ts
Referenced artifact was not completely inspected
(19 cases, incl. symlink bypasses and the removed overrides) and scripts/relay-selftest.ts
Referenced artifact was not completely inspected
| `scripts/export-conversations.ts` (relay) | `~/.local/share/chatgpt-export/<date>` | `.chatgpt-export-manifest.json`, `index.json`; unless index-only also `su
Referenced artifact was not completely inspected
| `scripts/export-conversations.ts` (relay) | `~/.local/share/chatgpt-export/<date>` | `.chatgpt-export-manifest.json`, `index.json`; unless index-only also `su