Security audit
Security checks for vulnerabilities and agentic risk
This skill locally manages a 3D-printer filament inventory and does not show hidden network access, privilege changes, or unrelated behavior.
Installers should be comfortable with the skill storing filament inventory details, notes, locations, and purchase costs in a local JSON file under the OpenClaw workspace. Review the broad trigger wording if you want the skill to activate only for explicit inventory-management requests.
The skill advertises local file read/write behavior but does not declare any explicit tool scope or permissions boundary. That makes its filesystem access implicit rather than constrained, increasing the risk of overbroad access or accidental misuse if the runtime grants more capability than the documentation suggests.
The 'Use when' list includes generic phrases such as 'filament', 'what filament do I have', and 'printing materials', which are broad enough to match everyday user requests outside a clearly bounded invocation context. The manifest does not provide negative examples or explicit scope constraints to distinguish when this skill should or should not activate.
No suspicious patterns detected.
