← 返回 Skills 市场
Log Scrubber
作者
Heather-Herbert
· GitHub ↗
· v1.0.2
· MIT-0
225
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install log-scrubber
功能描述
Automatically redacts API keys, tokens, and secrets from workspace logs and memory files.
使用说明 (SKILL.md)
Log Scrubber
This skill automatically scans your /root/.openclaw/workspace/ environment, logs, and memory files to detect and redact sensitive information like API keys, tokens, and credentials.
Features
- Proactive Scanning: Scans for known patterns (regex) of common secrets.
- Automated Redaction: Sanitizes files in-place while keeping backups of original files (e.g.,
.bakextension). - Dry-Run Mode: Allows you to simulate redaction without modifying files.
- Security: Ensures your secrets don't accidentally end up in logs sent to providers or stored in plain-text memory files.
Usage
To perform a dry-run (check proposed changes without modification):
python3 /root/.openclaw/workspace/skills/log-scrubber/scripts/scrub.py --dry-run
To apply changes:
python3 /root/.openclaw/workspace/skills/log-scrubber/scripts/scrub.py
External Endpoints
- This skill does not call any external endpoints. It operates entirely locally.
Security & Privacy
- This skill performs all redaction operations locally on your machine. No data is sent to external servers.
Model Invocation
- This skill runs locally and does not autonomously invoke models beyond the standard OpenClaw agent execution.
Trust Statement
- By using this skill, you agree that it will overwrite files in your workspace with redacted versions. Always ensure you have backups of important data.
安全使用建议
This skill appears internally consistent and performs local redaction as described, but take these precautions before enabling it: 1) Run the --dry-run first to see what would be changed. 2) Back up important files (the script creates .bak files but keep your own backups). 3) Review the regex patterns to ensure they match your secret formats and to reduce false positives/negatives. 4) Be aware it opens files as UTF-8 text and will attempt to rewrite any file under memory/ and logs/ (binary files could error or be corrupted). 5) Verify you trust the source (homepage points to a repo) before installing — the code is simple and local, but always prudent to confirm provenance.
功能分析
Type: OpenClaw Skill
Name: log-scrubber
Version: 1.0.2
The log-scrubber skill is a local utility designed to identify and redact sensitive information like API keys and tokens from workspace logs and memory files. The implementation in scripts/scrub.py uses standard Python libraries (os, re, shutil) to perform regex-based redaction and includes safety features like a dry-run mode and automatic file backups (.bak). No network activity, data exfiltration, or malicious execution patterns were detected.
能力评估
Purpose & Capability
The name/description (redact API keys/tokens from workspace logs and memory) matches the shipped code and SKILL.md. The script only reads /root/.openclaw/workspace/{memory,logs} and MEMORY.md and performs regex-based redaction — these are proportionate to the stated purpose.
Instruction Scope
SKILL.md and the script consistently instruct scanning the workspace and offer a dry-run. The script modifies files in-place (saving .bak backups) as documented. There is no instruction to read unrelated system files, environment variables, or to transmit data externally. Note: it operates recursively on all files under the target dirs and opens files as UTF-8 text — this may produce errors or miss non-text files, but that is an implementation detail rather than scope creep.
Install Mechanism
Instruction-only skill with one included Python script and no install spec. No external downloads or package installation steps are present, so nothing is written to disk beyond the script itself and its normal runtime backups.
Credentials
No environment variables, credentials, or external endpoints are requested. The only resources accessed are the workspace paths declared in SKILL.md and the script. This access is consistent with the purpose.
Persistence & Privilege
always is false and the skill does not request elevated privileges or modify other skills or global agent configuration. It does persist changes to workspace files (and creates .bak backups), which is expected for a redaction tool and is disclosed in SKILL.md.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install log-scrubber - 安装完成后，直接呼叫该 Skill 的名称或使用
/log-scrubber触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Added a "dry-run" mode to allow simulating redaction without modifying any files.
- Updated documentation with instructions for using the dry-run and standard redaction modes.
v1.0.1
- Updated scripts/scrub.py (details not specified).
- No changes to documentation or external requirements.
- Maintains focus on proactive scanning and automated redaction of sensitive information in logs and memory files.
v1.0.0
Initial release of log-scrubber.
- Automatically scans and redacts API keys, tokens, and other secrets from /root/.openclaw/workspace/ logs and memory files.
- Uses regex-based detection for common sensitive data patterns.
- Redacts files in-place and creates backups (with .bak extension) of originals.
- Operates entirely locally—no data is sent to external servers.
- Enhances security by preventing leakage of sensitive information through logs and memory.
元数据
常见问题
Log Scrubber 是什么？
Automatically redacts API keys, tokens, and secrets from workspace logs and memory files. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 225 次。
如何安装 Log Scrubber？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install log-scrubber」即可一键安装，无需额外配置。
Log Scrubber 是免费的吗？
是的，Log Scrubber 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Log Scrubber 支持哪些平台？
Log Scrubber 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Log Scrubber？
由 Heather-Herbert（@heather-herbert）开发并维护，当前版本 v1.0.2。
推荐 Skills