Is jalexspringer/forage-shopping safe?
Yes. jalexspringer/forage-shopping is safe to install. Oathe's behavioral security audit gave the forage-shopping skill by jalexspringer a trust score of 87/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/jalexspringer/forage-shopping
Is jalexspringer/forage-shopping safe to install?
The skill appears to be a legitimate product search and price comparison tool with clean code and no obvious malicious behavior. However, it requires connection to an external MCP server which introduces data privacy concerns and potential for manipulation of shopping recommendations.
What security issues were found in jalexspringer/forage-shopping?
Category Scores
Findings (2)
MEDIUM External MCP Server Dependency -25 ▶
The skill requires connection to an external MCP server at 'https://forageshopping.com/mcp' which could potentially collect user shopping queries, preferences, and search patterns. The server's data handling practices are not verified.
LOW Potential Shopping Behavior Manipulation -20 ▶
The external MCP server could theoretically influence purchasing decisions by manipulating search results, product recommendations, or pricing information presented to users.
Should I install jalexspringer/forage-shopping?
Oathe's verdict for jalexspringer/forage-shopping is SAFE with a trust score of 87/100. Recommendation: Install with caution.