permission-auditor

To check OpenClaw skill permissions for security risks, analyze the requested access types like fileWrite and shell to identify over-privileged skills. This process flags dangerous permission combinations and recommends a minimal access scope based on actual task needs.

Dangerous permission combinations in access control auditing are high-risk pairings of permissions, such as network and shell access, that can expand a system's attack surface. Identifying these pairings helps prevent skills from gaining excessive control over your environment.

To apply least privilege principles to skill permissions, map the skill's declared access to its described purpose and evaluate if each permission is justified. This ensures the skill operates with the minimum necessary access to perform its functions.

Yes, you can audit fileRead and network permissions before installing an OpenClaw skill. The auditor reviews declared access against actual task needs, explains the associated risks, and suggests if the permissions are appropriate or should be reduced.

A permission fit assessment for OpenClaw skills is an evaluation that maps declared access to actual task requirements. It results in a recommended minimal permission set, ensuring the skill only retains the access necessary to function securely.