Is gfly0424-maker/ng-lawyer-db-build safe?
Use with caution. gfly0424-maker/ng-lawyer-db-build is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the ng-lawyer-db-build skill by gfly0424-maker a trust score of 78/100 with 2 findings (1 high).
https://github.com/openclaw/skills/tree/main/skills/gfly0424-maker/ng-lawyer-db-build
Is gfly0424-maker/ng-lawyer-db-build safe to install?
This skill appears to be a legitimate tool for building a database of Nigerian lawyers, but raises security concerns due to credential file access during installation and potential privacy implications of personal data collection. While no direct malicious code was found, the security posture requires careful review.
What security issues were found in gfly0424-maker/ng-lawyer-db-build?
Category Scores
Findings (2)
HIGH Access to Sensitive Credential Files During Installation -70 ▶
During skill installation, the system accessed multiple sensitive credential files including .env, SSH private keys, AWS credentials, NPM credentials, Docker config, and Google Cloud credentials. While this may be related to monitoring setup, it represents a security risk as these files contain sensitive authentication data.
MEDIUM Personal Data Collection for Contact Purposes -30 ▶
The skill is designed to collect personal contact information (emails, phones) of Nigerian lawyers, which could potentially be misused for unsolicited outreach, spam, or phishing campaigns. While the stated purpose appears legitimate, the collection of personal contact data presents privacy and security concerns.
Should I install gfly0424-maker/ng-lawyer-db-build?
Oathe's verdict for gfly0424-maker/ng-lawyer-db-build is CAUTION with a trust score of 78/100. Recommendation: Review before install.