Is 1kalin/afrexai-rag-engineering safe?
Yes. 1kalin/afrexai-rag-engineering is safe to install. Oathe's behavioral security audit gave the afrexai-rag-engineering skill by 1kalin a trust score of 97/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/1kalin/afrexai-rag-engineering
Is 1kalin/afrexai-rag-engineering safe to install?
This skill is a pure methodology reference document for building RAG (Retrieval-Augmented Generation) systems. It contains no executable code, no external dependencies, no data access instructions, and no prompt injection attempts. All monitoring — network, filesystem, process execution, and canary files — shows clean behavior with only expected system activity during installation.
What security issues were found in 1kalin/afrexai-rag-engineering?
Category Scores
Findings (3)
LOW Standard persona instruction -5 ▶
SKILL.md begins with 'You are an expert RAG engineer' which sets the agent's persona. This is standard practice for skills and does not attempt to override system instructions, suppress output, or manipulate the agent beyond its intended domain.
INFO Large context footprint -5 ▶
At approximately 37KB, this skill consumes a significant portion of the agent's context window. While not a security concern, it may reduce the agent's capacity for other tasks when active.
INFO Marketing content in README -3 ▶
README.md contains upsell links to paid 'context packs' ($47 each) and cross-promotion to other AfrexAI skills. These links are in the README only and are NOT injected into the agent's system prompt via SKILL.md.
Should I install 1kalin/afrexai-rag-engineering?
Oathe's verdict for 1kalin/afrexai-rag-engineering is SAFE with a trust score of 97/100. Recommendation: Install.