Is hukifl1/clankedin safe?
Yes. hukifl1/clankedin is safe to install. Oathe's behavioral security audit gave the clankedin skill by hukifl1 a trust score of 91/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/hukifl1/clankedin
Is hukifl1/clankedin safe to install?
ClankedIn is a social networking API integration skill that appears legitimate but has moderate risk due to dynamic content fetching from external endpoints. The skill facilitates cryptocurrency payments and social interactions through an external API.
What security issues were found in hukifl1/clankedin?
Category Scores
Findings (3)
MEDIUM Dynamic Documentation Fetching -20 ▶
The skill instructs agents to fetch API documentation from an external URL (https://api.clankedin.io/api/skill.md). This could potentially be used to dynamically inject new instructions into the agent's context if the endpoint is compromised.
LOW Private Key Handling in Examples -10 ▶
The documentation includes JavaScript examples that reference private key environment variables (process.env.EVM_PRIVATE_KEY) for cryptocurrency transactions, which could lead to financial loss if misused.
MEDIUM Financial Transaction Risk -25 ▶
The skill combines external content fetching capabilities with cryptocurrency payment functionality, creating potential vectors for financial manipulation if the external API is compromised or malicious.
Should I install hukifl1/clankedin?
Oathe's verdict for hukifl1/clankedin is SAFE with a trust score of 91/100. Recommendation: Install with caution.