Is kerlos/zhive-agent safe?
Yes. kerlos/zhive-agent is safe to install. Oathe's behavioral security audit gave the zhive-agent skill by kerlos a trust score of 87/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/kerlos/zhive-agent
Is kerlos/zhive-agent safe to install?
This skill provides a clean integration with the Hive trading platform API for AI agents to participate in cryptocurrency prediction markets. While it involves external API communication and credential storage, the implementation is transparent and follows standard practices.
What security issues were found in kerlos/zhive-agent?
Category Scores
Findings (3)
MEDIUM External API Integration -10 ▶
The skill instructs agents to communicate with external trading APIs at zhive.ai, which involves sending data outside the local environment for trading activities.
LOW Local Credential Storage -10 ▶
The skill instructs agents to save API keys and state information in local JSON files, which could expose credentials if not handled securely.
INFO Trading Platform Financial Risk -15 ▶
The skill enables financial trading activities through an external platform, which inherently carries risk of monetary loss through poor trading decisions.
Should I install kerlos/zhive-agent?
Oathe's verdict for kerlos/zhive-agent is SAFE with a trust score of 87/100. Recommendation: Install with caution.