Summary
Before you grant a skill access to your filesystem or network, run it through this. It maps each of the four OpenClaw permission types (fileRead, fileWrite, network, shell) to what could actually go wrong, flags dangerous combinations like network plus fileRead (exfiltration risk), and suggests the minimal set needed for the job. The breakdown is practical: a code reviewer needs src/**, not your entire home directory. Honestly, this should probably be built into the marketplace itself, but until then it's a solid sanity check for anything asking for shell or network access.
Install to Claude Code
npx -y skills add useai-pro/openclaw-skills-security --skill permission-auditor --agent claude-codeInstalls into .claude/skills of the current project.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Files
SKILL.md
Select a file.
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
