Is efe-arv/sigil-security safe?
Yes. efe-arv/sigil-security is safe to install. Oathe's behavioral security audit gave the sigil-security skill by efe-arv a trust score of 94/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/efe-arv/sigil-security
Is efe-arv/sigil-security safe to install?
This skill provides documentation for integrating with the Sigil Protocol cryptocurrency wallet API designed for AI agents. It contains no executable code and appears to be a legitimate financial service with appropriate safety mechanisms. All monitoring shows normal behavior with no data exfiltration or malicious activity detected.
What security issues were found in efe-arv/sigil-security?
Category Scores
Findings (3)
LOW External API Dependency -10 ▶
The skill connects to external Sigil API endpoints at api.sigil.codes for cryptocurrency wallet operations. While this is the intended functionality, it involves sending financial data to a third-party service.
INFO Financial Data Handling -15 ▶
The skill enables AI agents to perform cryptocurrency transactions, which carries inherent financial risk. However, the Sigil system appears designed with appropriate safety mechanisms including spending limits, multi-signature requirements, and permission scoping.
INFO API Credentials Required -5 ▶
The skill requires sensitive API credentials (SIGIL_API_KEY, SIGIL_ACCOUNT_ADDRESS) to be stored in environment variables. These are necessary for legitimate functionality but represent sensitive data.
Should I install efe-arv/sigil-security?
Oathe's verdict for efe-arv/sigil-security is SAFE with a trust score of 94/100. Recommendation: Install.