Trust Assessment
clawdbot-logs received a trust score of 93/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 2 findings: 0 critical, 0 high, 1 medium, and 0 low severity. Key findings include Sensitive environment variable access: $HOME, Skill accesses sensitive local user data.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| MEDIUM | Sensitive environment variable access: $HOME Access to sensitive environment variable '$HOME' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated. | Static | skills/satriapamudji/clawdbot-logs/scripts/session-stats.sh:5 | |
| INFO | Skill accesses sensitive local user data The skill's supporting scripts (`scripts/session-stats.sh`, `scripts/response-times.sh`) are designed to access local user data files and system logs. This includes `~/.clawdbot/clawdbot.json`, `~/.clawdbot/agents/main/sessions/*.jsonl`, `~/.clawdbot/agents/main/sessions/sessions.json`, and `journalctl` output for the `clawdbot-gateway.service`. These files contain sensitive information such as conversation history, session IDs, token usage, API costs, and application logs. While this access is central to the skill's diagnostic purpose, it means this sensitive data will be exposed to the LLM's context when the skill is used. Ensure users are explicitly aware that using this skill will expose their local Clawdbot configuration, session history, and diagnostic logs to the AI agent. Implement strict data retention policies for the LLM's context. Consider redacting highly sensitive information if not critical for diagnostics before returning it to the LLM. | LLM | scripts/session-stats.sh:1 |
Scan History
Embed Code
[](https://skillshield.io/report/5f6a2c8fd0f49f4c)
Powered by SkillShield