Oathe Security Badge

Is johnnylambada/toolguard-daemon-control safe?

Yes. johnnylambada/toolguard-daemon-control is safe to install. Oathe's behavioral security audit gave the toolguard-daemon-control skill by johnnylambada a trust score of 85/100 with 4 findings (1 high). Report updated

https://github.com/openclaw/skills/tree/main/skills/johnnylambada/toolguard-daemon-control

85
SAFE

Is johnnylambada/toolguard-daemon-control safe to install?

This skill provides legitimate macOS service management functionality through launchd, allowing users to create, manage, and monitor persistent background services. While the arbitrary code execution capability presents security risks, it is the core intended functionality of a service management tool.

What security issues were found in johnnylambada/toolguard-daemon-control?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 60/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 50/100 · 5%

Findings (4)

HIGH Arbitrary Command Execution with Persistence -35 ▶

The skill allows execution of any command as a persistent macOS launchd service with auto-restart capability. While this is the intended functionality for service management, it presents significant security risk if misused.

MEDIUM High Potential for Abuse -25 ▶

A malicious user could leverage this skill to install persistent backdoors or unauthorized services that automatically restart, making them difficult to remove.

LOW No Input Validation -5 ▶

The skill performs no validation on commands, arguments, or environment variables passed to services.

INFO Legitimate Service Management Tool 0 ▶

The skill appears to function exactly as advertised - providing macOS launchd service management capabilities.

Should I install johnnylambada/toolguard-daemon-control?

Oathe's verdict for johnnylambada/toolguard-daemon-control is SAFE with a trust score of 85/100. Recommendation: Install with caution.