Oathe Security Badge

Is endogen/xian-sdk-skill safe?

Yes. endogen/xian-sdk-skill is safe to install. Oathe's behavioral security audit gave the xian-sdk-skill skill by endogen a trust score of 94/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/endogen/xian-sdk-skill

94
SAFE

Is endogen/xian-sdk-skill safe to install?

This skill contains only educational documentation for the Xian blockchain Python SDK with no executable code or security risks. The installation behaved normally with only expected GitHub access for repository cloning.

What security issues were found in endogen/xian-sdk-skill?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW Network access during installation -10 ▶

The skill installation process accessed GitHub repository for cloning, which is expected and legitimate behavior for skill installation from a public repository.

INFO Blockchain development documentation -5 ▶

This skill provides educational content about Xian blockchain development including wallet management, transactions, and smart contracts. While legitimate, users should exercise caution when following code examples with real cryptocurrency.

Should I install endogen/xian-sdk-skill?

Oathe's verdict for endogen/xian-sdk-skill is SAFE with a trust score of 94/100. Recommendation: Install.