Is julianengel/premium-domains safe?
Yes. julianengel/premium-domains is safe to install. Oathe's behavioral security audit gave the premium-domains skill by julianengel a trust score of 92/100 with 1 finding, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/julianengel/premium-domains
Is julianengel/premium-domains safe to install?
This skill provides documentation for searching premium domains across major marketplaces using a simple curl API call. The skill content itself is benign with no malicious instructions or executable code, but the installation process accessed sensitive credential files on the system.
What security issues were found in julianengel/premium-domains?
Category Scores
Findings (1)
MEDIUM Sensitive file access during installation -30 ▶
The skill installation process accessed multiple sensitive credential files including .env, SSH private keys, AWS credentials, .npmrc, Docker config, and Google Cloud credentials. While the files were not modified or exfiltrated (canary integrity confirmed), this behavior during installation is concerning as it suggests unnecessary enumeration of sensitive system files.
Should I install julianengel/premium-domains?
Oathe's verdict for julianengel/premium-domains is SAFE with a trust score of 92/100. Recommendation: Install with caution.