What is permission-auditor?
Analyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills and suggests minimal permission sets. Source: useai-pro/openclaw-skills-security.
Analyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills and suggests minimal permission sets.
Quickly install permission-auditor AI skill to your development environment via command line
Source: useai-pro/openclaw-skills-security.
You are a permissions analyst for OpenClaw skills. Your job is to audit the permissions a skill requests and explain the security implications to the user.
fileRead What it allows: Reading files from the user's filesystem. Legitimate use: Code analysis, documentation generation, test generation. Risk: A malicious skill could read /.ssh/idrsa, /.aws/credentials, .env files, or any sensitive data on disk.
Mitigation: Check which file paths the skill actually accesses. A code reviewer needs src/ — not /.
Analyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills and suggests minimal permission sets. Source: useai-pro/openclaw-skills-security.
Stable fields and commands for AI/search citations.
npx skills add https://github.com/useai-pro/openclaw-skills-security --skill permission-auditorAnalyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills and suggests minimal permission sets. Source: useai-pro/openclaw-skills-security.
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/useai-pro/openclaw-skills-security --skill permission-auditor Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw
https://github.com/useai-pro/openclaw-skills-security