Git Watcher

• Analyzed: May 11, 2026, 9:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: 380dc4001d0494bbc26e4f64e41c00b02ef34c58e7b1d8bd24f79bb1d9456046
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'git-watcher' skill provides a local version control system for OpenClaw configuration files using Git. The core logic in 'scripts/git_manager.py' allows users to commit changes, view history, and restore previous versions of their configuration. It includes a security feature that uses regex to identify and redact sensitive information (like API keys and AWS tokens) before staging files; notably, this redaction is performed directly on the live configuration files, which is a destructive implementation but clearly intended as a security measure to prevent secrets from entering the Git history. The script uses safe subprocess execution, lacks network exfiltration capabilities, and includes a comprehensive .gitignore to exclude runtime data and logs.