Openclaw Arbiter

Audit installed skill permissions: detect network access, subprocess execution, file writes, unsafe deserialization, and environment variable usage. Permission matrix for every skill in your workspace. Free alert layer — upgrade to openclaw-arbiter-pro for revocation, quarantine, and policy enforcement.

This appears to be a legitimate offline permission auditor. Before installing or running it: (1) Review the scripts/arbiter.py file yourself (or inspect it with a diff) to confirm there are no unexpected network calls or obfuscated code. (2) Run only read-only operations first (audit, report, status) to see findings without making changes. (3) Do not run quarantine/revoke/enforce unless you have a current backup of your workspace and understand the changes they perform. (4) If you plan to automate or grant agent autonomy, be cautious: although always:false, an agent could be instructed to run enforcement commands which will modify or remove other skills. (5) If you need higher assurance, run the tool in an isolated environment (container or VM) and grep for network-related modules/URLs before trusting it with enforcement operations.

Type: OpenClaw Skill Name: openclaw-arbiter Version: 1.0.2 The OpenClaw Arbiter skill is a security tool designed to audit and enforce permissions for other agent skills. It transparently declares its purpose to detect risky operations (like network calls, subprocess execution, and unsafe deserialization) in other skills. The `scripts/arbiter.py` code accurately implements this functionality, performing file system operations (renaming, copying, deleting directories) only for its stated defensive features like quarantining and revoking skills, all within the designated workspace. It adheres to its claim of having no external dependencies and making no network calls. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The powerful file system operations are integral to its security function and are not used for malicious intent.