Is jacopo-eth/erc8128 safe?

https://github.com/openclaw/skills/tree/main/skills/jacopo-eth/erc8128

96
SAFE

The ERC-8128 skill is a pure documentation resource that provides information about Ethereum HTTP signatures without any executable code or system access. All security checks passed with no evidence of malicious behavior or data exfiltration.

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (1)

LOW Sensitive file system activity during audit -10 ▶

File system events were detected on sensitive canary files (.env, SSH keys, AWS credentials) during the audit period, but the canary integrity check confirmed no actual access or modification by the skill.