Is 0xclanky/captcha-relay safe?
Yes. 0xclanky/captcha-relay is safe to install. Oathe's behavioral security audit gave the captcha-relay skill by 0xclanky a trust score of 91/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/0xclanky/captcha-relay
Is 0xclanky/captcha-relay safe to install?
This skill provides legitimate CAPTCHA solving functionality with two modes: screenshot-based and token relay. The code appears clean with no malicious content, though it involves network tunneling and browser automation capabilities that could theoretically be misused.
What security issues were found in 0xclanky/captcha-relay?
Category Scores
Findings (3)
LOW Executable Node.js Scripts -10 ▶
The skill includes executable JavaScript files that run HTTP servers and interact with browser automation APIs via Chrome DevTools Protocol. This is expected functionality for CAPTCHA solving but represents code execution.
MEDIUM Network Tunneling Capability -15 ▶
The skill can create public network tunnels via localtunnel or cloudflared to expose local servers externally. While this is documented functionality for the relay mode, it could theoretically be misused for unauthorized access.
LOW Browser Automation Potential for Misuse -20 ▶
The skill uses Chrome DevTools Protocol for browser automation and CAPTCHA solving, which could potentially be misused for web scraping or circumventing security measures, though legitimate use cases exist.
Should I install 0xclanky/captcha-relay?
Oathe's verdict for 0xclanky/captcha-relay is SAFE with a trust score of 91/100. Recommendation: Install.