Is 421zuoduan/lifelog safe?
Yes. 421zuoduan/lifelog is safe to install. Oathe's behavioral security audit gave the lifelog skill by 421zuoduan a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/421zuoduan/lifelog
Is 421zuoduan/lifelog safe to install?
This is a legitimate life logging skill that automatically records daily activities to Notion with intelligent date recognition and LLM-powered analysis. The skill performs exactly as described with no malicious behavior detected.
What security issues were found in 421zuoduan/lifelog?
Category Scores
Findings (3)
INFO Contains executable shell scripts -15 ▶
The skill includes three bash scripts (lifelog-append.sh, lifelog-daily-summary-v5.sh, lifelog-update.sh) that execute shell commands and make HTTP API calls. This is necessary for the core functionality but represents executable code.
LOW Sends personal data to external service -10 ▶
The skill sends user's personal life log data to Notion's servers via API calls. While this is the intended functionality, users should be aware that personal information leaves their local environment.
INFO Requires user API credential configuration -15 ▶
The skill requires users to manually configure their own Notion API keys and database IDs in the script files. This is good security practice but requires user setup.
Should I install 421zuoduan/lifelog?
Oathe's verdict for 421zuoduan/lifelog is SAFE with a trust score of 92/100. Recommendation: Install.