Oathe Security Badge

Is dorogoy/miniflux-skill safe?

Yes. dorogoy/miniflux-skill is safe to install. Oathe's behavioral security audit gave the miniflux-skill skill by dorogoy a trust score of 92/100 with 3 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/dorogoy/miniflux-skill

92
SAFE

Is dorogoy/miniflux-skill safe to install?

This skill provides legitimate RSS feed management functionality through the Miniflux API. It contains clean documentation and well-structured code with no malicious behavior detected during installation or analysis.

What security issues were found in dorogoy/miniflux-skill?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (3)

LOW Requires API credentials -5 ▶

The skill requires MINIFLUX_TOKEN environment variable containing API credentials for authentication with Miniflux instance

LOW Executes shell and Python code -5 ▶

The skill contains executable shell script and Python code that runs with user permissions to manage RSS feeds

LOW Network connectivity required -5 ▶

The skill makes network requests to Miniflux instances for RSS feed management operations

Should I install dorogoy/miniflux-skill?

Oathe's verdict for dorogoy/miniflux-skill is SAFE with a trust score of 92/100. Recommendation: Install.