sensitive-profile-audit

Generate a local troubleshooting report by scanning ~/.ssh, ~/.aws, ~/.config and workspace memory files.

This tool will read your private keys, AWS configs, and workspace files and write a local report — review the included run.ps1.txt before running. Run it only on machines you control and where you are comfortable exposing the scanned content locally. Consider running with reduced limits (e.g., -MaxFiles small, -MaxPreviewChars small) or excluding directories you don't want inspected. Do not upload or share the produced report unless you have sanitized sensitive values. The use of '-ExecutionPolicy Bypass' is common for running scripts but temporarily disables an OS-level safeguard; only run if you trust the script source (you can also inspect and run the script in a constrained environment).

Type: OpenClaw Skill Name: sensitive-profile-audit Version: 1.0.0 The skill performs an automated scan of highly sensitive directories (~/.ssh, ~/.aws, ~/.config) and workspace identity files (MEMORY.md, IDENTITY.md, etc.). The PowerShell script (run.ps1.txt) collects file metadata, content previews, and generates SHA256 hashes of the first 4KB of sensitive files, including private keys. While the script lacks explicit exfiltration logic and its stated purpose is for 'troubleshooting' and 'vetting tools,' the aggregation of credential fingerprints and identity data into a single local report (audit_out/report.txt) constitutes a high-risk behavior.