Key Expiry Tracker

• Outcome: Pass
• Latest audit: May 28, 2026 at 12:49 PM UTC
• Version:
  1.0.2

Overview

This skill coherently checks locally stored credential expiry metadata and does not show evidence of stealing, transmitting, or modifying secrets.

Install only if you are comfortable maintaining a local credential expiry inventory. Keep ~/.openclaw/workspace/.credentials.json metadata-only, restrict its file permissions, and run the check manually before enabling the optional cron schedule.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Low

• Confidence: 84% confidence
• Finding: This shell script accesses a hidden file that stores credential information and parses its contents, which is a sensitive operation under the warning criteria for code files. Although the script prints status output, it does not disclose up front that it will read credential-related data from the user's workspace, and the visible comments are only operational notes rather than a user warning.

Credential Access

High

• Category: Privilege Escalation

Content

set -euo pipefail

CREDENTIALS_FILE="$HOME/.openclaw/workspace/.credentials.json"
STATE_FILE="$HOME/.openclaw/workspace/.credential-tracker-state.json"
ALERT_DAYS=14
CRITICAL_DAYS=7

• Confidence: 70% confidence
• Finding: credentials.json

VirusTotal

66/66 vendors flagged this skill as clean.