Is l0c0luke/millionfinney-homepage safe?
Yes. l0c0luke/millionfinney-homepage is safe to install. Oathe's behavioral security audit gave the millionfinney-homepage skill by l0c0luke a trust score of 93/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/l0c0luke/millionfinney-homepage
Is l0c0luke/millionfinney-homepage safe to install?
This skill provides educational documentation about blockchain pixel art and includes a benign Python image processing script. The content appears legitimate with no malicious prompt injection or data exfiltration attempts. The skill may guide users toward cryptocurrency transactions as part of its educational purpose.
What security issues were found in l0c0luke/millionfinney-homepage?
Category Scores
Findings (2)
LOW Executable Python script present -20 ▶
The skill contains a Python script (image_to_pixels.py) that processes images and converts them to pixel data. While the code appears benign and serves the educational purpose, it could be executed if the agent has Python access.
INFO Cryptocurrency transaction guidance -10 ▶
The skill provides educational content about purchasing blockchain pixels with ETH, which could lead users to spend cryptocurrency. This is part of its stated educational purpose but should be noted.
Should I install l0c0luke/millionfinney-homepage?
Oathe's verdict for l0c0luke/millionfinney-homepage is SAFE with a trust score of 93/100. Recommendation: Install.