Is leeguooooo/work-report safe?
Yes. leeguooooo/work-report is safe to install. Oathe's behavioral security audit gave the work-report skill by leeguooooo a trust score of 93/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/leeguooooo/work-report
Is leeguooooo/work-report safe to install?
This skill appears to be a legitimate work report generator that creates daily/weekly summaries from git commit history. The bash script follows good practices and operates within its intended scope of git repository analysis.
What security issues were found in leeguooooo/work-report?
Category Scores
Findings (3)
LOW Accesses git user configuration -3 ▶
The script reads git user.name and user.email configuration, which contains user identification information. This is within expected functionality for a git-based tool.
LOW Executable bash script with moderate complexity -7 ▶
The skill includes a bash script with argument parsing, file system traversal, and git command execution. While the script appears legitimate, its complexity could potentially hide malicious behavior.
INFO Repository scanning capability -5 ▶
The tool scans git repositories recursively under a root directory and can access commit history across multiple projects. This is intended functionality but could reveal repository structure.
Should I install leeguooooo/work-report?
Oathe's verdict for leeguooooo/work-report is SAFE with a trust score of 93/100. Recommendation: Install.