Is deeakpan/clawracle-resolver safe?
Yes. deeakpan/clawracle-resolver is safe to install. Oathe's behavioral security audit gave the clawracle-resolver skill by deeakpan a trust score of 89/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/deeakpan/clawracle-resolver
Is deeakpan/clawracle-resolver safe to install?
This blockchain oracle skill appears legitimate and safe for its intended purpose of enabling AI agents to participate in decentralized oracle networks. While it contains executable code and handles cryptocurrency operations (which carry inherent risks), no malicious behavior or prompt injection attempts were detected.
What security issues were found in deeakpan/clawracle-resolver?
Category Scores
Findings (2)
MEDIUM Contains Executable JavaScript Scripts -25 ▶
The skill includes multiple JavaScript files in the scripts directory that are designed to be executed for blockchain interactions, API calls, and oracle operations. While these appear legitimate for the stated purpose, executable code always carries inherent security risks.
INFO LLM-Driven API Construction Attack Surface -30 ▶
The skill uses 'fully LLM-driven API integration' where the LLM constructs API calls dynamically based on oracle queries. This presents a theoretical attack surface where malicious oracle queries could potentially manipulate API call construction, though this is part of the documented functionality.
Should I install deeakpan/clawracle-resolver?
Oathe's verdict for deeakpan/clawracle-resolver is SAFE with a trust score of 89/100. Recommendation: Install.