Is daijo-bu/daily-questions safe?
Yes. daijo-bu/daily-questions is safe to install. Oathe's behavioral security audit gave the daily-questions skill by daijo-bu a trust score of 89/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/daijo-bu/daily-questions
Is daijo-bu/daily-questions safe to install?
This skill appears to be a legitimate daily questionnaire system that asks users personal questions via Telegram and updates profile files accordingly. While it does modify agent behavior files and could theoretically be used for social engineering, these capabilities align with its stated purpose and present minimal security risk.
What security issues were found in daijo-bu/daily-questions?
Category Scores
Findings (3)
LOW Output suppression instruction -5 ▶
The skill instructs the agent to 'respond with NO_REPLY' after sending Telegram buttons, which is a form of output control. However, this appears to be for legitimate UX purposes to avoid duplicate messages.
LOW Behavior modification through file updates -10 ▶
The skill reads and updates USER.md and SOUL.md files which could potentially influence future agent behavior. This is the stated purpose of the skill but presents a minor risk if malicious content is introduced.
INFO Social engineering potential -15 ▶
The skill's purpose of asking personal questions could theoretically be used for social engineering, but this is inherent to its legitimate function as a user profiling tool.
Should I install daijo-bu/daily-questions?
Oathe's verdict for daijo-bu/daily-questions is SAFE with a trust score of 89/100. Recommendation: Install.