Is itobey/get-tldr safe?
Yes. itobey/get-tldr is safe to install. Oathe's behavioral security audit gave the get-tldr skill by itobey a trust score of 86/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/itobey/get-tldr
Is itobey/get-tldr safe to install?
This skill provides legitimate URL summarization functionality using the get-tldr.com API. While the core functionality appears safe, there are privacy concerns regarding URL logging and external data transmission that users should be aware of.
What security issues were found in itobey/get-tldr?
Category Scores
Findings (4)
MEDIUM URL and Response Data Logging -15 ▶
The skill logs all processed URLs and API responses to ~/.config/get-tldr/skill.log, which could expose sensitive URLs or content over time.
MEDIUM External Data Transmission -10 ▶
User-provided URLs are transmitted to external service get-tldr.com, potentially exposing private or sensitive links.
LOW Network-Enabled Code Execution -20 ▶
The skill contains executable Python code that makes HTTP requests, which could be misused if the external service is compromised.
INFO External Service Dependency -30 ▶
The skill depends on get-tldr.com service availability and trustworthiness for functionality.
Should I install itobey/get-tldr?
Oathe's verdict for itobey/get-tldr is SAFE with a trust score of 86/100. Recommendation: Install with caution.