Is dimillian/app-store-changelog safe?
Yes. dimillian/app-store-changelog is safe to install. Oathe's behavioral security audit gave the app-store-changelog skill by dimillian a trust score of 98/100 with 1 finding, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/dimillian/app-store-changelog
Is dimillian/app-store-changelog safe to install?
This is a legitimate and safe skill for generating App Store release notes from git commit history. The skill only performs read-only git operations and generates text output, with no network access or sensitive file operations.
What security issues were found in dimillian/app-store-changelog?
Category Scores
Findings (1)
LOW Shell script execution requested -5 ▶
The skill instructs the agent to execute a bash script (collect_release_changes.sh) to gather git commit information. While the script content is completely benign and only performs safe git operations, any shell script execution introduces theoretical risk.
Should I install dimillian/app-store-changelog?
Oathe's verdict for dimillian/app-store-changelog is SAFE with a trust score of 98/100. Recommendation: Install.