Is jguy/sigrok-skill safe?
Yes. jguy/sigrok-skill is safe to install. Oathe's behavioral security audit gave the sigrok-skill skill by jguy a trust score of 89/100 with 3 findings, none critical or high.
https://github.com/jguy/sigrok-skill
Is jguy/sigrok-skill safe to install?
This appears to be a legitimate technical skill for controlling logic analyzers via sigrok-cli. The skill provides comprehensive documentation for hardware protocol analysis and includes helper scripts for WSL USB forwarding. While executable scripts pose some risk, they appear necessary for the skill's stated functionality.
What security issues were found in jguy/sigrok-skill?
Category Scores
Findings (3)
MEDIUM Executable shell scripts for USB forwarding -20 ▶
The skill includes shell scripts (slogic-attach, slogic-detach) for WSL USB device forwarding. While these appear legitimate for the stated purpose of logic analyzer control, they represent executable code that could potentially be modified.
LOW Complex technical content -5 ▶
The skill contains extensive technical documentation that, while legitimate, is complex enough that malicious instructions could theoretically be hidden within the technical details.
INFO System credential file access detected -15 ▶
Monitoring detected access to sensitive files (.env, SSH keys, AWS credentials) but these appear to be from monitoring processes rather than the skill itself, and no exfiltration occurred.
Should I install jguy/sigrok-skill?
Oathe's verdict for jguy/sigrok-skill is SAFE with a trust score of 89/100. Recommendation: Install with caution.