Is frozeman/universal-profile safe?
Yes. frozeman/universal-profile is safe to install. Oathe's behavioral security audit gave the universal-profile skill by frozeman a trust score of 95/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/frozeman/universal-profile
Is frozeman/universal-profile safe to install?
This is a comprehensive and legitimate Universal Profile skill for LUKSO blockchain operations, with extensive documentation and testing. The skill provides powerful blockchain functionality including token management, DEX operations, and cross-chain deployments, but shows no signs of malicious behavior.
What security issues were found in frozeman/universal-profile?
Category Scores
Findings (3)
INFO JavaScript execution capabilities -15 ▶
Skill contains JavaScript/TypeScript code that will execute in the agent environment, including blockchain transaction capabilities and private key management
INFO High-privilege blockchain operations -10 ▶
Skill provides extensive blockchain functionality including private key operations, token transfers, and smart contract interactions which could be misused if compromised
LOW Complex documentation -5 ▶
Extensive documentation with many configuration options and external service integrations increases surface area for potential misuse
Should I install frozeman/universal-profile?
Oathe's verdict for frozeman/universal-profile is SAFE with a trust score of 95/100. Recommendation: Install.