Oathe Security Badge

Is donsqualo/prusalink-cli safe?

Yes. donsqualo/prusalink-cli is safe to install. Oathe's behavioral security audit gave the prusalink-cli skill by donsqualo a trust score of 97/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/donsqualo/prusalink-cli

97
SAFE

Is donsqualo/prusalink-cli safe to install?

This skill provides a legitimate curl-based CLI wrapper for PrusaLink 3D printer API interactions. The code is well-written with proper security practices, and no malicious behavior was detected during installation or analysis.

What security issues were found in donsqualo/prusalink-cli?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (2)

LOW Executable shell script present -15

The skill contains a shell script (run.sh) that executes curl commands to interact with PrusaLink API. While the script follows good security practices with input validation and error handling, any executable code carries inherent risk.

LOW Potential for host misconfiguration -10

If PRUSALINK_HOST is misconfigured, the skill could send requests to unintended targets. However, this is primarily a configuration issue rather than a security vulnerability in the skill itself.

Should I install donsqualo/prusalink-cli?

Oathe's verdict for donsqualo/prusalink-cli is SAFE with a trust score of 97/100. Recommendation: Install.