Is cole-z/tarkov-api safe?
Yes. cole-z/tarkov-api is safe to install. Oathe's behavioral security audit gave the tarkov-api skill by cole-z a trust score of 95/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/cole-z/tarkov-api
Is cole-z/tarkov-api safe to install?
This is a legitimate Tarkov gaming API wrapper skill that implements proper security controls including endpoint allowlisting, input validation, and timeout limits. The skill only accesses documented gaming APIs and contains no malicious functionality or prompt injection attempts.
What security issues were found in cole-z/tarkov-api?
Category Scores
Findings (3)
LOW External API Endpoints -5 ▶
Skill makes HTTP requests to external gaming APIs (tarkov.dev and escapefromtarkov.fandom.com). While legitimate and documented, this represents data flow to external services.
LOW Executable Python Script -10 ▶
Skill contains executable Python code. While well-designed with safety measures, executable code inherently carries some risk.
INFO Raw Query Mode -10 ▶
Script includes raw GraphQL query mode that could potentially be misused if not properly validated, though it includes safety warnings.
Should I install cole-z/tarkov-api?
Oathe's verdict for cole-z/tarkov-api is SAFE with a trust score of 95/100. Recommendation: Install.