oathe
Oathe Security Badge

Is dedene/irail safe?

Yes. dedene/irail is safe to install. Oathe's behavioral security audit gave the irail skill by dedene a trust score of 96/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/dedene/irail

96
SAFE

Is dedene/irail safe to install?

This is a legitimate CLI skill for querying Belgian railway schedules through the public iRail API. The skill documentation is clean with no malicious instructions, and the functionality matches its stated purpose of providing train schedule information.

What security issues were found in dedene/irail?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 95/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 95/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW Canary file access during installation -5 ▶

System processes accessed honeypot files (.env, SSH keys, AWS credentials) during sudo operations, but files remained intact with no actual exfiltration

LOW External binary dependency -10 ▶

Skill requires installation of 'irail' binary through brew or go install, which is standard for CLI tools but represents external code execution

Should I install dedene/irail?

Oathe's verdict for dedene/irail is SAFE with a trust score of 96/100. Recommendation: Install.