oathe
Oathe Security Badge

Is joehoel/trein safe?

Yes. joehoel/trein is safe to install. Oathe's behavioral security audit gave the trein skill by joehoel a trust score of 95/100 with 1 finding, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/joehoel/trein

95
SAFE

Is joehoel/trein safe to install?

This is a documentation-only skill for Dutch Railways train information CLI tool. The skill contains no executable code, exhibits no malicious behavior, and maintains integrity of all security canaries during installation.

What security issues were found in joehoel/trein?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 75/100 · 5%

Findings (1)

INFO External Binary Dependencies -25 ▶

The skill documentation instructs users to download and install external binaries from GitHub releases or via npm. While the skill itself contains no executable code, users will be guided to install third-party software that requires an NS API key.

Should I install joehoel/trein?

Oathe's verdict for joehoel/trein is SAFE with a trust score of 95/100. Recommendation: Install.