Is jorgermp/google-photos safe?
Yes. jorgermp/google-photos is safe to install. Oathe's behavioral security audit gave the google-photos skill by jorgermp a trust score of 86/100 with 2 findings (1 high).
https://github.com/openclaw/skills/tree/main/skills/jorgermp/google-photos
Is jorgermp/google-photos safe to install?
This Google Photos skill provides legitimate API integration functionality with clean documentation and standard OAuth2 authentication. However, it accessed sensitive system files during installation without clear justification, which raises security concerns despite no actual data modification.
What security issues were found in jorgermp/google-photos?
Category Scores
Findings (2)
HIGH Accessed Sensitive System Files -30 ▶
During installation, the skill accessed sensitive files including .env, SSH private keys, AWS credentials, and SSH authorized_keys. While no modifications were detected, this behavior is concerning for a Google Photos integration skill.
LOW Hardcoded Path in Python Shebang -15 ▶
The Python script uses a hardcoded shebang path specific to the developer's environment, which may cause portability issues.
Should I install jorgermp/google-photos?
Oathe's verdict for jorgermp/google-photos is SAFE with a trust score of 86/100. Recommendation: Install with caution.