Is catwalksophie/shortcut safe?
Yes. catwalksophie/shortcut is safe to install. Oathe's behavioral security audit gave the shortcut skill by catwalksophie a trust score of 97/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/catwalksophie/shortcut
Is catwalksophie/shortcut safe to install?
This is a legitimate Shortcut project management integration that provides comprehensive API wrapper functionality. The code is well-structured and professional with no signs of malicious intent. All security concerns are minor and related to the inherent risks of API integrations.
What security issues were found in catwalksophie/shortcut?
Category Scores
Findings (2)
MEDIUM Executable shell scripts included -15 ▶
The skill contains multiple bash scripts in the scripts/ directory that will be executed by the agent. While these appear to be legitimate Shortcut API wrappers using curl and jq, they represent executable code that could potentially be modified or misused.
LOW API credential handling -10 ▶
The skill requires and handles Shortcut API tokens, either from environment variables or config files. While implemented securely, compromised tokens could allow unauthorized access to user's Shortcut workspace.
Should I install catwalksophie/shortcut?
Oathe's verdict for catwalksophie/shortcut is SAFE with a trust score of 97/100. Recommendation: Install.