Rollbar
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: rollbar Version: 1.2.0 The OpenClaw Rollbar skill is designed to interact with the Rollbar API for error monitoring and management. It uses `curl` for API calls and `python3` for JSON parsing, both declared dependencies. The `ROLLBAR_ACCESS_TOKEN` is securely handled via environment variables, and input validation is performed on command-line arguments. There is no evidence of malicious intent, data exfiltration to unauthorized endpoints, persistence mechanisms, or prompt injection attempts in `SKILL.md`. All operations are aligned with the stated purpose of managing Rollbar errors.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A broader token could let the agent view multiple projects or change Rollbar item status if the user grants write scope.
The skill requires a Rollbar access token and supports both narrower project tokens and broader account/write-scoped tokens.
Use a token with `read` scope for monitoring; add `write` scope only if you need to resolve/mute items... account tokens grant broader access
Use a project-level read token for monitoring, add write scope only when you intentionally want status changes, and avoid account-level tokens unless multi-project access is necessary.
Accidental or overly broad use of write commands could mark active errors as resolved or muted, reducing alert visibility.
The helper script performs Rollbar API PATCH requests for item status changes such as resolve, mute, and activate.
api_patch "item/$ITEM_ID" '{"status":"resolved"}'Treat resolve, mute, and activate as approval-worthy actions, and prefer read-only tokens when using the skill only for monitoring.
If enabled, the agent will periodically query Rollbar and surface error data on the configured schedule.
The skill suggests user-configured periodic monitoring, which is disclosed and alert-focused rather than hidden persistence.
To get automatic alerts for new critical/error items, set up a cron job in OpenClaw... Recommended schedule: every 30–60 minutes during work hours.
Use cron only when desired, keep the schedule limited, and run scheduled monitoring with a read-only token where possible.