Is guogang1024/research-engine safe?
Yes. guogang1024/research-engine is safe to install. Oathe's behavioral security audit gave the research-engine skill by guogang1024 a trust score of 82/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/guogang1024/research-engine
Is guogang1024/research-engine safe to install?
This appears to be a legitimate research automation tool written in Chinese that helps gather information from multiple sources. While it contains no malicious code, it has privacy concerns due to file system access and activity logging.
What security issues were found in guogang1024/research-engine?
Category Scores
Findings (4)
MEDIUM Writes files to user home directory -15 ▶
The script writes research reports and browsing history to /home/vken/.openclaw/workspace/research without explicit user permission, potentially accumulating sensitive information about user research activities.
MEDIUM Attempts external network calls -15 ▶
The script tries to make web requests to GitHub, Moltbook, and general web search APIs which could potentially expose user data or be used for data exfiltration.
LOW Dynamic imports and executable code -20 ▶
The Python script uses dynamic imports and contains executable code that could potentially be exploited, though no malicious code was detected.
LOW Privacy and logging concerns -25 ▶
The skill logs detailed user research activities including queries, timestamps, and browsing patterns, which could accumulate sensitive information over time.
Should I install guogang1024/research-engine?
Oathe's verdict for guogang1024/research-engine is SAFE with a trust score of 82/100. Recommendation: Install with caution.