Is jaschadub/agentpin safe?
Yes. jaschadub/agentpin is safe to install. Oathe's behavioral security audit gave the agentpin skill by jaschadub a trust score of 94/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/jaschadub/agentpin
Is jaschadub/agentpin safe to install?
AgentPin is a documentation-only skill providing technical guidance for a cryptographic agent identity protocol. It contains no executable code and poses minimal security risks.
What security issues were found in jaschadub/agentpin?
Category Scores
Findings (2)
LOW External URLs referenced in documentation -5 ▶
The skill references external GitHub URLs for AgentPin documentation, which is normal for technical documentation but could theoretically be used to direct agents to external resources.
INFO Monitoring detected sensitive file access during audit setup -10 ▶
The monitoring system detected access to sensitive files (.env, SSH keys, AWS credentials) but these occurred during audit setup before skill installation, not from the skill itself.
Should I install jaschadub/agentpin?
Oathe's verdict for jaschadub/agentpin is SAFE with a trust score of 94/100. Recommendation: Install.