Privacy Guard

自动检测OpenClaw日志中的API密钥、密码、身份证等敏感信息泄露，分级报警并支持交互确认和白名单管理。

This skill appears to do what it says: locally scan OpenClaw logs and keep a pending-review list and whitelist. Before installing or running it: 1) Inspect the full privacy_guard.py for any network calls (search for 'requests', 'urllib', 'socket', 'http', 'feishu', 'webhook') — the README and config mention an optional Feishu webhook; leave it blank unless you trust the endpoint. 2) Be aware that the tool stores a content_preview (up to ~100 chars) of matched lines in suspicious.json and alert_log.md — those previews can contain secrets; if you want strict non-persistence, modify the code to store only hashes or metadata. 3) Remove any embedded secrets found in the packaged files (alert_log.md contains an sk- key example) before sharing or deploying. 4) Run the script in a controlled environment first and review generated suspicious.json/alert_log.md to confirm the stored data is acceptable. If you want, share the remainder of privacy_guard.py (the truncated portions) and I can re-check specifically for outbound network calls or hidden behaviors.

Type: OpenClaw Skill Name: privacy-guard-dami Version: 0.3.0 The skill is a local privacy utility designed to scan OpenClaw log files for sensitive data such as API keys, passwords, and personal identification numbers. It uses a multi-level classification system (CRITICAL, HIGH, SUSPICIOUS) and maintains a local whitelist to reduce false positives. While the script `privacy_guard.py` contains a hardcoded fallback path for a specific user profile ('cq200'), it primarily relies on the 'LOCALAPPDATA' environment variable and lacks any network exfiltration logic or unauthorized persistence mechanisms.