← 返回 Skills 市场
134
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-permissions
功能描述
This skill should be used when the user wants to audit, review, or list the permissions and access rights held by OpenClaw. Use it for requests like "check o...
安全使用建议
This skill appears to do exactly what it claims: read OpenClaw config files under ~/.openclaw and produce a masked permissions report. Before installing or running it, consider the following: (1) it will read files that may contain tokens, API keys, and private keys — although the instructions forbid printing those values, the agent will have access to them during the audit; (2) only run this skill if you trust the agent and the runtime environment (an untrusted agent could ignore masking rules and exfiltrate secrets); (3) if you are unsure, inspect the local files yourself or run the skill in an isolated environment/account; (4) prefer installing only from a known publisher or adding an explicit consent step before the skill reads sensitive files. If you do not trust the skill's source, do not grant it permission to read your ~/.openclaw directory.
能力评估
Purpose & Capability
Name and description claim an OpenClaw permissions audit; the SKILL.md exclusively instructs reading OpenClaw config files and extracting permission-related fields. No unrelated environment variables, binaries, or installs are requested.
Instruction Scope
The SKILL.md explicitly instructs the agent to read specific files under ~/.openclaw (openclaw.json, exec-approvals.json, identity/device-auth.json, identity/device.json) and to extract narrowly defined fields. It also includes clear rules to mask tokens/private keys and avoid outputting privateKeyPem or full IDs. This scope is appropriate for an audit, but it does require the agent to access files that contain sensitive secrets (tokens, IPC auth, keys). The skill deliberately asks the agent to skip the socket field (IPC auth token) and to avoid showing secret values, which is good practice, but the agent will still have access to those secrets at runtime.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk or downloaded by the skill itself.
Credentials
The skill requests no environment variables or external credentials, which is proportionate. However, it requires reading multiple local config files that are likely to contain tokens, API keys, and private keys. Reading these files is expected for a permissions audit, but it is a sensitive operation and grants the agent access to secret material (even if the skill's output rules forbid printing secrets).
Persistence & Privilege
The skill does not request always:true and has no install-time persistence. It is user-invocable and uses the default model-invocation behavior. Note: any skill that can be invoked autonomously and is allowed to read local config files increases potential impact, but this skill does not request extra privileges beyond reading the listed files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-permissions - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-permissions触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of OpenClaw Permissions Audit Skill.
- Audits and lists current OpenClaw permissions and access rights across API credentials, channels, gateway, tools, commands, device identity, and internal hooks.
- Reads from OpenClaw config files and generates a structured Markdown report with all sensitive values masked.
- Marks missing, empty, or unreadable fields clearly in the report.
- Designed for transparency and safe review of OpenClaw’s configured capabilities and integrations.
元数据
常见问题
OpenClaw Permissions Audit 是什么？
This skill should be used when the user wants to audit, review, or list the permissions and access rights held by OpenClaw. Use it for requests like "check o... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 134 次。
如何安装 OpenClaw Permissions Audit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-permissions」即可一键安装，无需额外配置。
OpenClaw Permissions Audit 是免费的吗？
是的，OpenClaw Permissions Audit 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw Permissions Audit 支持哪些平台？
OpenClaw Permissions Audit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw Permissions Audit？
由 rushingAI（@rushingai）开发并维护，当前版本 v1.0.0。
推荐 Skills