Is clinicode/prayer-times safe?

https://github.com/openclaw/skills/tree/main/skills/clinicode/prayer-times

96
SAFE

This is a legitimate Islamic prayer times skill that provides prayer schedules for any global location. The skill makes appropriate API calls to location and prayer time services, contains clean documentation with no prompt injection attempts, and exhibits standard behavior matching its stated purpose.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 95/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (4)

INFO External API Usage -5 ▶

The skill makes HTTP requests to legitimate external APIs for location detection and prayer times

INFO Executable Python Script -10 ▶

Contains a Python script that executes to fetch and display prayer times

INFO Network Activity During Installation -5 ▶

Expected git clone network activity to GitHub during installation

INFO Network Requests Required -5 ▶

Skill requires internet access to function as designed