Is fdarkaou/genvirall-skill safe?

https://github.com/openclaw/skills/tree/main/skills/fdarkaou/genvirall-skill

95
SAFE

This skill provides legitimate social media automation functionality as a wrapper for the genviral Partner API. The comprehensive bash script implements proper security practices including input validation and error handling. No malicious behavior was detected during installation, and all security canaries remained intact.

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (1)

LOW Executable bash script present -15 ▶

The skill contains a comprehensive bash script (genviral.sh) that provides API wrapper functionality. While the code appears legitimate and follows security best practices, executable scripts always carry inherent risk.