Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local proxy inventory tool that stores declared proxy metadata on disk and shows no hidden network, persistence, or execution behavior.
Install only if you are comfortable keeping proxy infrastructure metadata in local OpenClaw memory files. Avoid placing passwords, API keys, or reusable secrets in labels or notes, and protect the local storage directory if other users or processes share the machine.
The skill performs local file reads and writes but does not declare any explicit tool scope or permissions boundary. That creates unnecessary ambiguity about what filesystem access the skill expects, making it easier for an agent runtime or reviewer to overgrant access and harder to enforce least privilege.
The skill stores sensitive proxy connection details and related metadata on local disk, but the description does not clearly warn users about that sensitivity. Proxy hosts, ports, authentication method details, session labels, and operational notes can expose infrastructure, credentials patterns, or usage intent if the local files are accessed by other processes or users.
No suspicious patterns detected.
