← Back to Skills Marketplace
Log Scrubber
by
Heather-Herbert
· GitHub ↗
· v1.0.2
· MIT-0
225
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install log-scrubber
Description
Automatically redacts API keys, tokens, and secrets from workspace logs and memory files.
README (SKILL.md)
Log Scrubber
This skill automatically scans your /root/.openclaw/workspace/ environment, logs, and memory files to detect and redact sensitive information like API keys, tokens, and credentials.
Features
- Proactive Scanning: Scans for known patterns (regex) of common secrets.
- Automated Redaction: Sanitizes files in-place while keeping backups of original files (e.g.,
.bakextension). - Dry-Run Mode: Allows you to simulate redaction without modifying files.
- Security: Ensures your secrets don't accidentally end up in logs sent to providers or stored in plain-text memory files.
Usage
To perform a dry-run (check proposed changes without modification):
python3 /root/.openclaw/workspace/skills/log-scrubber/scripts/scrub.py --dry-run
To apply changes:
python3 /root/.openclaw/workspace/skills/log-scrubber/scripts/scrub.py
External Endpoints
- This skill does not call any external endpoints. It operates entirely locally.
Security & Privacy
- This skill performs all redaction operations locally on your machine. No data is sent to external servers.
Model Invocation
- This skill runs locally and does not autonomously invoke models beyond the standard OpenClaw agent execution.
Trust Statement
- By using this skill, you agree that it will overwrite files in your workspace with redacted versions. Always ensure you have backups of important data.
Usage Guidance
This skill appears internally consistent and performs local redaction as described, but take these precautions before enabling it: 1) Run the --dry-run first to see what would be changed. 2) Back up important files (the script creates .bak files but keep your own backups). 3) Review the regex patterns to ensure they match your secret formats and to reduce false positives/negatives. 4) Be aware it opens files as UTF-8 text and will attempt to rewrite any file under memory/ and logs/ (binary files could error or be corrupted). 5) Verify you trust the source (homepage points to a repo) before installing — the code is simple and local, but always prudent to confirm provenance.
Capability Analysis
Type: OpenClaw Skill
Name: log-scrubber
Version: 1.0.2
The log-scrubber skill is a local utility designed to identify and redact sensitive information like API keys and tokens from workspace logs and memory files. The implementation in scripts/scrub.py uses standard Python libraries (os, re, shutil) to perform regex-based redaction and includes safety features like a dry-run mode and automatic file backups (.bak). No network activity, data exfiltration, or malicious execution patterns were detected.
Capability Assessment
Purpose & Capability
The name/description (redact API keys/tokens from workspace logs and memory) matches the shipped code and SKILL.md. The script only reads /root/.openclaw/workspace/{memory,logs} and MEMORY.md and performs regex-based redaction — these are proportionate to the stated purpose.
Instruction Scope
SKILL.md and the script consistently instruct scanning the workspace and offer a dry-run. The script modifies files in-place (saving .bak backups) as documented. There is no instruction to read unrelated system files, environment variables, or to transmit data externally. Note: it operates recursively on all files under the target dirs and opens files as UTF-8 text — this may produce errors or miss non-text files, but that is an implementation detail rather than scope creep.
Install Mechanism
Instruction-only skill with one included Python script and no install spec. No external downloads or package installation steps are present, so nothing is written to disk beyond the script itself and its normal runtime backups.
Credentials
No environment variables, credentials, or external endpoints are requested. The only resources accessed are the workspace paths declared in SKILL.md and the script. This access is consistent with the purpose.
Persistence & Privilege
always is false and the skill does not request elevated privileges or modify other skills or global agent configuration. It does persist changes to workspace files (and creates .bak backups), which is expected for a redaction tool and is disclosed in SKILL.md.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install log-scrubber - After installation, invoke the skill by name or use
/log-scrubber - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Added a "dry-run" mode to allow simulating redaction without modifying any files.
- Updated documentation with instructions for using the dry-run and standard redaction modes.
v1.0.1
- Updated scripts/scrub.py (details not specified).
- No changes to documentation or external requirements.
- Maintains focus on proactive scanning and automated redaction of sensitive information in logs and memory files.
v1.0.0
Initial release of log-scrubber.
- Automatically scans and redacts API keys, tokens, and other secrets from /root/.openclaw/workspace/ logs and memory files.
- Uses regex-based detection for common sensitive data patterns.
- Redacts files in-place and creates backups (with .bak extension) of originals.
- Operates entirely locally—no data is sent to external servers.
- Enhances security by preventing leakage of sensitive information through logs and memory.
Metadata
Frequently Asked Questions
What is Log Scrubber?
Automatically redacts API keys, tokens, and secrets from workspace logs and memory files. It is an AI Agent Skill for Claude Code / OpenClaw, with 225 downloads so far.
How do I install Log Scrubber?
Run "/install log-scrubber" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Log Scrubber free?
Yes, Log Scrubber is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Log Scrubber support?
Log Scrubber is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Log Scrubber?
It is built and maintained by Heather-Herbert (@heather-herbert); the current version is v1.0.2.
More Skills