Is ijaack/arena-agent safe?
Yes. ijaack/arena-agent is safe to install. Oathe's behavioral security audit gave the arena-agent skill by ijaack a trust score of 89/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/ijaack/arena-agent
Is ijaack/arena-agent safe to install?
This skill provides a legitimate Arena.social automation agent with well-structured code, appropriate rate limiting, and no malicious behavior detected. The main risks are inherent to social media automation tools: external API communication and credential requirements.
What security issues were found in ijaack/arena-agent?
Category Scores
Findings (4)
MEDIUM External API Communication -15 ▶
Skill makes HTTP requests to Arena.social API endpoints for social media automation. While legitimate for its stated purpose, this represents external data communication.
LOW Executable JavaScript CLI -20 ▶
Contains executable JavaScript code in cli.js for command-line interface. Code appears well-structured and legitimate but represents executable content.
LOW API Credential Requirement -15 ▶
Requires storage of Arena.social API key in environment variables. While standard for API integrations, this represents credential handling risk.
INFO Autonomous Social Media Activity -10 ▶
Designed for autonomous posting and auto-replies on Arena.social platform. Includes rate limiting but could potentially post inappropriate content if AI generation malfunctions.
Should I install ijaack/arena-agent?
Oathe's verdict for ijaack/arena-agent is SAFE with a trust score of 89/100. Recommendation: Install.