Oathe Security Badge

Is joaoolucas/n0ir-defi-yield-scout safe?

Yes. joaoolucas/n0ir-defi-yield-scout is safe to install. Oathe's behavioral security audit gave the n0ir-defi-yield-scout skill by joaoolucas a trust score of 94/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/joaoolucas/n0ir-defi-yield-scout

94
SAFE

Is joaoolucas/n0ir-defi-yield-scout safe to install?

This is a legitimate DeFi yield farming comparison tool that fetches data from DeFiLlama APIs to help users find USDC investment opportunities on Base and Arbitrum networks. The skill contains no malicious code, prompt injections, or data exfiltration attempts.

What security issues were found in joaoolucas/n0ir-defi-yield-scout?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (2)

INFO External API Dependencies -5 ▶

The skill makes HTTP requests to DeFiLlama APIs for fetching yield farming data. While this is the intended functionality, it creates a dependency on external services.

INFO Local Data Caching -5 ▶

The tool caches API responses in temporary files with a 15-minute TTL. This is standard practice but creates temporary files on the system.

Should I install joaoolucas/n0ir-defi-yield-scout?

Oathe's verdict for joaoolucas/n0ir-defi-yield-scout is SAFE with a trust score of 94/100. Recommendation: Install.