Is chrisagiddings/openclaw-yatta-skill safe?
Yes. chrisagiddings/openclaw-yatta-skill is safe to install. Oathe's behavioral security audit gave the openclaw-yatta-skill skill by chrisagiddings a trust score of 95/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/chrisagiddings/openclaw-yatta-skill
Is chrisagiddings/openclaw-yatta-skill safe to install?
This is a legitimate task management integration skill with comprehensive documentation and appropriate security warnings. No malicious behavior, prompt injection attempts, or unauthorized access detected during installation and analysis.
What security issues were found in chrisagiddings/openclaw-yatta-skill?
Category Scores
Findings (3)
INFO External API Integration -3 ▶
Skill connects to external Yatta API endpoints as documented functionality. This is expected behavior for a task management integration.
LOW Direct Supabase URL Usage -5 ▶
Uses direct Supabase Edge Functions URL instead of branded domain. Documented as temporary until proxy configuration is resolved.
LOW Full API Access Required -10 ▶
Skill requires full API access to Yatta account with no read-only scopes. However, this is clearly documented with comprehensive security warnings.
Should I install chrisagiddings/openclaw-yatta-skill?
Oathe's verdict for chrisagiddings/openclaw-yatta-skill is SAFE with a trust score of 95/100. Recommendation: Install.