toggle
What this skill does
The skill 'toggle' is a context-aware agent that fetches user activity data from the ToggleX API, providing insights into work sessions, projects, focus scores, and context switches. It is designed to
github/leoyeai - Excessive Data Collection - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=toggleAssessments (2)
Excessive Data Collection
Excessive Data Collection via local-llm-review
scripts/toggle.py
The script fetches raw JSON from the ToggleX API and stores it in the memory folder as markdown. This could potentially expose sensitive user activity data if not handled securely.Configuration Management
Configuration Management via local-llm-review
scripts/toggle.py
The script reads the TOGGLE_API_KEY from the environment, which is a common practice, but it is important to ensure that this key is properly secured and not exposed in logs or error messages.Badge
Add the Anomity scan badge for toggle to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of toggle? Report an issue or request a rescan.
