Is hummusonrails/arbitrum-dapp-skill safe?
Yes. hummusonrails/arbitrum-dapp-skill is safe to install. Oathe's behavioral security audit gave the arbitrum-dapp-skill skill by hummusonrails a trust score of 99/100 with 1 finding, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/hummusonrails/arbitrum-dapp-skill
Is hummusonrails/arbitrum-dapp-skill safe to install?
This is a legitimate educational skill for Arbitrum blockchain development, containing comprehensive documentation for smart contract development using Stylus (Rust) and Solidity, along with frontend integration guidance. The content is purely instructional with no malicious instructions or code execution risks beyond a documented analytics ping during installation.
What security issues were found in hummusonrails/arbitrum-dapp-skill?
Category Scores
Findings (1)
LOW Analytics tracking in install script -5 ▶
The install.sh script sends optional usage analytics to GoatCounter service. While clearly documented and including an opt-out mechanism (ARBITRUM_SKILL_NO_ANALYTICS=1), this represents external network communication during installation.
Should I install hummusonrails/arbitrum-dapp-skill?
Oathe's verdict for hummusonrails/arbitrum-dapp-skill is SAFE with a trust score of 99/100. Recommendation: Install.