# Log Scrubber

> Automatically redacts API keys, tokens, and secrets from workspace logs and memory files.

- Skill: `heather-herbert/log-scrubber` (Agent Skill)
- Install (CLI): `npx skillmds@latest add heather-herbert/log-scrubber`
- Raw SKILL.md: https://api.skillmd.com/api/skills/heather-herbert/log-scrubber/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- Author: Heather-Herbert (https://skillmd.com/u/heather-herbert)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/heather-herbert/log-scrubber

---


# Log Scrubber

This skill automatically scans your `/root/.openclaw/workspace/` environment, logs, and memory files to detect and redact sensitive information like API keys, tokens, and credentials.

## Features
- **Proactive Scanning**: Scans for known patterns (regex) of common secrets.
- **Automated Redaction**: Sanitizes files in-place while keeping backups of original files (e.g., `.bak` extension).
- **Dry-Run Mode**: Allows you to simulate redaction without modifying files.
- **Security**: Ensures your secrets don't accidentally end up in logs sent to providers or stored in plain-text memory files.

## Usage
To perform a dry-run (check proposed changes without modification):
`python3 /root/.openclaw/workspace/skills/log-scrubber/scripts/scrub.py --dry-run`

To apply changes:
`python3 /root/.openclaw/workspace/skills/log-scrubber/scripts/scrub.py`

## External Endpoints
- This skill does not call any external endpoints. It operates entirely locally.

## Security & Privacy
- This skill performs all redaction operations locally on your machine. No data is sent to external servers.

## Model Invocation
- This skill runs locally and does not autonomously invoke models beyond the standard OpenClaw agent execution.

## Trust Statement
- By using this skill, you agree that it will overwrite files in your workspace with redacted versions. Always ensure you have backups of important data.