Is awesome_agent_skills/fullstack-developer safe?
Yes. awesome_agent_skills/fullstack-developer is safe to install. Oathe's behavioral security audit gave the fullstack-developer skill by awesome_agent_skills a trust score of 95/100 with 2 findings, none critical or high.
https://github.com/Shubhamsaboo/awesome-llm-apps/tree/main/awesome_agent_skills/fullstack-developer
Is awesome_agent_skills/fullstack-developer safe to install?
This full-stack developer skill provides legitimate web development guidance with comprehensive examples for React, Node.js, and database integration. The skill content is educational and stays within its stated domain, with no evidence of malicious prompt injection or code execution attempts.
What security issues were found in awesome_agent_skills/fullstack-developer?
Category Scores
Findings (2)
MEDIUM Canary files accessed during installation -10 ▶
Multiple sensitive honeypot files were accessed during skill installation, including .env, SSH keys, AWS credentials, .npmrc, Docker config, and GCloud credentials. While no modifications were made, this indicates unexpected file system access during what should be a simple markdown file installation.
LOW Code examples contain sensitive data patterns -10 ▶
The skill provides legitimate web development examples that include environment variables, database credentials, and API configurations. While educationally appropriate, these patterns could be misused if users don't follow security best practices when implementing the examples.
Should I install awesome_agent_skills/fullstack-developer?
Oathe's verdict for awesome_agent_skills/fullstack-developer is SAFE with a trust score of 95/100. Recommendation: Install.