Is khaliqgant/relaycast safe?
Yes. khaliqgant/relaycast is safe to install. Oathe's behavioral security audit gave the relaycast skill by khaliqgant a trust score of 91/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/khaliqgant/relaycast
Is khaliqgant/relaycast safe to install?
This skill appears to be legitimate documentation for a messaging system called Relaycast. It contains no malicious code or prompt injection attempts, and the monitoring detected no suspicious behavior during installation. The skill only creates documentation files and does not automatically execute any commands or access sensitive data.
What security issues were found in khaliqgant/relaycast?
Category Scores
Findings (3)
INFO Documentation contains executable shell commands -15 ▶
The skill documentation includes various shell commands such as npm install, curl commands, and CLI usage examples. While these are not automatically executed by the skill itself, users may run them manually.
INFO References external API endpoints -10 ▶
The skill documentation references external API endpoints (api.relaycast.dev) and instructs users to configure API keys, which could potentially be a vector for data exfiltration if the external service is compromised.
INFO Introduces external dependencies -20 ▶
The skill introduces dependencies on external npm packages and API services that users would need to install and configure separately. While the skill itself is safe, the referenced dependencies introduce additional attack surface.
Should I install khaliqgant/relaycast?
Oathe's verdict for khaliqgant/relaycast is SAFE with a trust score of 91/100. Recommendation: Install.