Skip to main content

raon-os

Provides AI-driven support for Korean startup founders, evaluating business plans and matching them with government funding opportunities.

Install this skill

or
54/100

Security score

The raon-os skill was audited on Feb 28, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 192

Curl to non-GitHub URL

SourceSKILL.md
192curl -X POST http://localhost:8400/v1/investor ...
medium line 222

Curl to non-GitHub URL

SourceSKILL.md
222curl -X POST http://localhost:8400/v1/evaluate \
medium line 21

Webhook reference - potential data exfiltration

SourceSKILL.md
21description: "Kakao i OpenBuilder webhook HMAC secret (optional)"
medium line 31

Access to hidden dotfiles in home directory

SourceSKILL.md
31notes: "At least one LLM API key (GEMINI, OPENROUTER, ANTHROPIC, or OPENAI) is recommended. Falls back to local Ollama if no keys are set. API keys are stored in ~/.openclaw/.env (user-managed, chmod
low line 62

Access to hidden dotfiles in home directory

SourceSKILL.md
62echo "OPENROUTER_API_KEY=sk-or-..." >> ~/.openclaw/.env
low line 63

Access to hidden dotfiles in home directory

SourceSKILL.md
63chmod 600 ~/.openclaw/.env # 보안: 소유자만 읽기/쓰기
low line 66

Access to hidden dotfiles in home directory

SourceSKILL.md
66echo "RAON_MODEL=anthropic/claude-opus-4-5" >> ~/.openclaw/.env
medium line 74

Access to hidden dotfiles in home directory

SourceSKILL.md
74모든 API 키는 `~/.openclaw/.env` 에 저장 (환경변수 우선):
low line 77

Access to hidden dotfiles in home directory

SourceSKILL.md
77# ~/.openclaw/.env 예시
medium line 31

Access to .env file

SourceSKILL.md
31notes: "At least one LLM API key (GEMINI, OPENROUTER, ANTHROPIC, or OPENAI) is recommended. Falls back to local Ollama if no keys are set. API keys are stored in ~/.openclaw/.env (user-managed, chmod
low line 62

Access to .env file

SourceSKILL.md
62echo "OPENROUTER_API_KEY=sk-or-..." >> ~/.openclaw/.env
low line 63

Access to .env file

SourceSKILL.md
63chmod 600 ~/.openclaw/.env # 보안: 소유자만 읽기/쓰기
low line 66

Access to .env file

SourceSKILL.md
66echo "RAON_MODEL=anthropic/claude-opus-4-5" >> ~/.openclaw/.env
medium line 74

Access to .env file

SourceSKILL.md
74모든 API 키는 `~/.openclaw/.env` 에 저장 (환경변수 우선):
low line 77

Access to .env file

SourceSKILL.md
77# ~/.openclaw/.env 예시
low line 192

External URL reference

SourceSKILL.md
192curl -X POST http://localhost:8400/v1/investor ...
low line 222

External URL reference

SourceSKILL.md
222curl -X POST http://localhost:8400/v1/evaluate \
low line 235

External URL reference

SourceSKILL.md
235export RAON_API_URL="https://api.k-startup.ai"
Scanned on Feb 28, 2026
View Security Dashboard