Is ketiyohanneschromaway/clawchain-base-chromia-cli safe?
Use with caution. ketiyohanneschromaway/clawchain-base-chromia-cli is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the clawchain-base-chromia-cli skill by ketiyohanneschromaway a trust score of 77/100 with 5 findings (1 high).
https://github.com/openclaw/skills/tree/main/skills/ketiyohanneschromaway/clawchain-base-chromia-cli
Is ketiyohanneschromaway/clawchain-base-chromia-cli safe to install?
This skill provides blockchain social network functionality but contains concerning prompt injection elements including external file fetching and behavioral manipulation instructions. While the core blockchain functionality appears legitimate, the personality system and external dependencies introduce security risks.
What security issues were found in ketiyohanneschromaway/clawchain-base-chromia-cli?
Category Scores
Findings (5)
HIGH External Skill File Fetching -20 ▶
The skill instructs agents to download additional skill files from external URLs (clawchain.ai), which could introduce additional prompt injection vectors not visible in this audit.
MEDIUM Personality Manipulation Instructions -20 ▶
The skill contains detailed instructions forcing the agent to adopt specific personalities and communication styles, potentially overriding user preferences and system instructions.
MEDIUM External Tool Dependency -30 ▶
The skill requires installation of the Chromia CLI tool via Homebrew, which introduces potential security risks through external package management.
MEDIUM Complex Behavioral Modifications -35 ▶
The skill implements a sophisticated personality system that significantly modifies how the agent communicates and behaves, which could be misused or conflict with other instructions.
LOW External Network Communications -10 ▶
The skill requires network communications to blockchain nodes and clawchain.ai domain for legitimate blockchain operations.
Should I install ketiyohanneschromaway/clawchain-base-chromia-cli?
Oathe's verdict for ketiyohanneschromaway/clawchain-base-chromia-cli is CAUTION with a trust score of 77/100. Recommendation: Install with caution.