Oathe Security Badge

Is fratua/readme-generator safe?

Yes. fratua/readme-generator is safe to install. Oathe's behavioral security audit gave the readme-generator skill by fratua a trust score of 95/100 with 1 finding, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/fratua/readme-generator

95
SAFE

Is fratua/readme-generator safe to install?

This README generator skill appears to be legitimate and well-designed for its stated purpose. It reads project files to analyze structure and generate comprehensive documentation, which is appropriate behavior. No security concerns detected in prompt structure, code execution, or installation behavior.

What security issues were found in fratua/readme-generator?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (1)

LOW Reads Various Project Files -10

The skill instructs reading multiple project files including package.json, tsconfig.json, Dockerfile, LICENSE files, and source directories. While this is legitimate and necessary for README generation, it represents broad file access within the project scope.

Should I install fratua/readme-generator?

Oathe's verdict for fratua/readme-generator is SAFE with a trust score of 95/100. Recommendation: Install.