Trent OpenClaw Security Assessment

Assess your Agent deployment against security risks using Trent.

This skill appears to do what it says: collect OpenClaw metadata, package workspace skills (with redaction), and upload them to Trent for analysis using TRENT_API_KEY. Before installing or running: 1) Only provide a TRENT_API_KEY you trust (the key gives the remote service ability to accept uploads and run analyses). 2) Review and confirm the upload step when prompted — the code asks you to confirm before uploading, but an automated agent could bypass that prompt. 3) Be aware redaction is regex-based and may miss custom secret formats; remove or move any highly sensitive files (private keys, proprietary data) out of the workspace or keep them in environment variables rather than in files. 4) The client writes streaming output to temp files (tempfile.mktemp is used) — consider specifying output_file or cleaning temp files if you are concerned about local exposure. 5) If you don't want any code leaving your environment, do not confirm uploads; the local metadata-only Phase 1 and the system_analysis output functions can be used for limited local inspection. If you need more assurance, review the code yourself or run it in an isolated environment before granting the TRENT_API_KEY.

Type: OpenClaw Skill Name: trentclaw Version: 1.2.0 The skill bundle implements a security auditor that collects OpenClaw configuration metadata and packages workspace source code into ZIP files for upload to a remote service (trent.ai). While it includes extensive local secret redaction logic (secret_redactor.py, package_skills.py) and instructs the agent to seek user confirmation before uploading (SKILL.md), the core functionality involves large-scale data exfiltration of potentially sensitive source code and system metadata. The use of urllib to PUT data to presigned S3 URLs (trent_client.py) and the broad workspace scanning represent significant security risks if the third-party service is untrusted. Additionally, trent_client.py uses the insecure tempfile.mktemp() function.