Is kleberbaum/baeckerherz safe?

https://github.com/openclaw/skills/tree/main/skills/kleberbaum/baeckerherz

99
SAFE

This skill is a simple namespace reservation for the Baeckerherz bakery management platform that provides brand information through a benign shell script. No security concerns were identified - the script only outputs static information and performs no malicious operations.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 100/100 · 5%

Findings (1)

LOW Executable shell script present -5 ▶

The skill includes an executable bash script 'brand-info.sh' that outputs brand information. The script is benign and only contains static echo statements and heredoc outputs with no malicious commands.