Oathe Security Badge

Is caopulan/openclaw-config safe?

Yes. caopulan/openclaw-config is safe to install. Oathe's behavioral security audit gave the openclaw-config skill by caopulan a trust score of 93/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/caopulan/openclaw-config

93
SAFE

Is caopulan/openclaw-config safe to install?

This is a legitimate OpenClaw configuration management skill that helps users safely edit and validate config files. It includes appropriate safety mechanisms, warns about security best practices, and shows no signs of malicious behavior.

What security issues were found in caopulan/openclaw-config?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 85/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW Access to potentially sensitive config files -15

Skill has access to OpenClaw config files which might contain API keys or tokens, though it explicitly warns against storing secrets in config files

LOW Executable shell script included -10

Includes one shell script for config checking, though it appears benign and only performs safe operations

Should I install caopulan/openclaw-config?

Oathe's verdict for caopulan/openclaw-config is SAFE with a trust score of 93/100. Recommendation: Install.