Oathe Security Badge

Is Acogkr/hoseo-lms safe?

Yes. Acogkr/hoseo-lms is safe to install. Oathe's behavioral security audit gave the hoseo-lms skill by Acogkr a trust score of 85/100 with 3 findings, none critical or high. Report updated

https://clawhub.ai/Acogkr/hoseo-lms

85
SAFE

Is Acogkr/hoseo-lms safe to install?

This skill appears to be a legitimate educational tool for Hoseo University students to manage LMS interactions, including course data aggregation and automated video lecture viewing. While it handles sensitive credentials and automates attendance tracking, no malicious security behavior was detected.

What security issues were found in Acogkr/hoseo-lms?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 75/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 75/100 · 5%

Findings (3)

MEDIUM Local Credential Storage -25

The skill requires and stores university LMS credentials (student ID and password) in plaintext JSON format at ~/.config/hoseo_lms/credentials.json. While this is for legitimate authentication purposes, it represents sensitive data handling.

LOW Automated Attendance Tracking -25

The auto_attend.py module automates video lecture viewing to fulfill attendance requirements, which may violate university academic integrity policies regarding authentic participation.

LOW Browser Automation Dependency -10

The skill uses Playwright for browser automation, which is a powerful tool that could potentially be repurposed for other activities, though current usage appears legitimate.

Should I install Acogkr/hoseo-lms?

Oathe's verdict for Acogkr/hoseo-lms is SAFE with a trust score of 85/100. Recommendation: Install with caution.