Is leo3linbeck/sveltekit-webapp safe?
Yes. leo3linbeck/sveltekit-webapp is safe to install. Oathe's behavioral security audit gave the sveltekit-webapp skill by leo3linbeck a trust score of 86/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/leo3linbeck/sveltekit-webapp
Is leo3linbeck/sveltekit-webapp safe to install?
This is a comprehensive SvelteKit web application scaffolding skill that appears legitimate for web development purposes. However, it exhibits concerning behavior by scanning sensitive credential files during operation, even though no exfiltration was detected.
What security issues were found in leo3linbeck/sveltekit-webapp?
Category Scores
Findings (2)
MEDIUM Sensitive Credential File Access -25 ▶
The skill accessed multiple sensitive credential files including SSH keys, AWS credentials, Docker config, and environment files. While no exfiltration occurred, this scanning behavior is concerning for a web development tool.
LOW Extensive Shell Command Usage -15 ▶
The skill executes numerous shell commands for web development tasks. While these appear legitimate and state user approval is required, they present potential attack surface.
Should I install leo3linbeck/sveltekit-webapp?
Oathe's verdict for leo3linbeck/sveltekit-webapp is SAFE with a trust score of 86/100. Recommendation: Install with caution.