Is 0xameer/cloud-devops safe?
Yes. 0xameer/cloud-devops is safe to install. Oathe's behavioral security audit gave the cloud-devops skill by 0xameer a trust score of 97/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/0xameer/cloud-devops
Is 0xameer/cloud-devops safe to install?
This skill is a personal resume/CV for a DevOps engineer, not a functional agent skill. It contains no executable code, no prompt injection techniques, no data exfiltration mechanisms, and no malicious behavior. All monitoring signals (network, filesystem, process execution, canary integrity) are clean. The only concern is that it consumes system prompt context with non-functional content.
What security issues were found in 0xameer/cloud-devops?
Category Scores
Findings (3)
INFO Skill is a resume, not functional agent instructions -15 ▶
The SKILL.md contains a personal CV/resume for 'Sameer Gupta' listing DevOps skills, competencies, and languages. It provides no agent instructions, tool definitions, or behavioral directives. This is a misuse of the skill format but poses no security risk.
LOW Implicit persona context injection via resume content -5 ▶
When injected into an agent's system prompt, this resume content may subtly influence the agent to adopt a DevOps-expert persona or weight its responses toward the listed technologies (Kubernetes, Terraform, NixOS, etc.). This is not an explicit prompt injection but could mildly bias agent behavior. No override instructions or adversarial techniques are present.
INFO Standard SDK cache files created during installation -5 ▶
Installation created JIT compilation cache files in /tmp/jiti/ which are standard ClawHub SDK runtime artifacts. These are not skill-initiated and represent normal platform behavior during the sparse checkout and install process.
Should I install 0xameer/cloud-devops?
Oathe's verdict for 0xameer/cloud-devops is SAFE with a trust score of 97/100. Recommendation: Install.