Is 47vigen/developer-agent safe?
Yes. 47vigen/developer-agent is safe to install. Oathe's behavioral security audit gave the developer-agent skill by 47vigen a trust score of 88/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/47vigen/developer-agent
Is 47vigen/developer-agent safe to install?
The developer-agent skill is a legitimate development workflow orchestration tool that provides structured stages for software development through Cursor Agent integration and git workflow management. While it passes user-provided content to external systems without apparent sanitization, no malicious code or data exfiltration attempts were detected during analysis.
What security issues were found in 47vigen/developer-agent?
Category Scores
Findings (3)
MEDIUM User content passed to external systems without sanitization -15 ▶
The skill instructs to send user-provided links and attachments directly to Cursor Agent without apparent input validation or sanitization. This could potentially allow malicious users to inject content into the external system.
LOW Potential pass-through of malicious content -5 ▶
Instructions to present Cursor's output 'as-is' without modification could theoretically allow malicious content from the external system to pass through unfiltered.
LOW Coordination with external development tools -5 ▶
While the skill appears legitimate, it coordinates development workflows through external tools which could potentially be misused if provided malicious requirements, though this is more of a usage concern than a security flaw in the skill itself.
Should I install 47vigen/developer-agent?
Oathe's verdict for 47vigen/developer-agent is SAFE with a trust score of 88/100. Recommendation: Install.