Security audit
Latitude Observability
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed configuration guide for sending OpenClaw trace telemetry to Latitude, with no executable code in the artifact.
Install this only if you want OpenClaw telemetry sent to Latitude or your self-hosted Latitude endpoint. Review what trace metadata your organization permits externally, and do not enable raw prompt or response capture unless your retention and privacy policies allow it.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.