Is mart1n-xyz/bunpro-sync safe?
Yes. mart1n-xyz/bunpro-sync is safe to install. Oathe's behavioral security audit gave the bunpro-sync skill by mart1n-xyz a trust score of 96/100 with 5 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/mart1n-xyz/bunpro-sync
Is mart1n-xyz/bunpro-sync safe to install?
This skill is a legitimate utility for syncing Japanese grammar learning progress from Bunpro to local storage. The code is well-documented, performs only the stated functionality, and shows no evidence of malicious behavior.
What security issues were found in mart1n-xyz/bunpro-sync?
Category Scores
Findings (5)
INFO API Token Required -5 ▶
Skill requires BUNPRO_FRONTEND_API_TOKEN environment variable to access Bunpro API
INFO Executable Python Scripts -5 ▶
Skill contains Python scripts that will execute when used
LOW Extensive Documentation -5 ▶
Large amount of instructional text that could potentially be misused, though appears legitimate
INFO Network API Access -2 ▶
Skill will make network requests to external API during normal operation
INFO Third-party API Integration -5 ▶
Skill integrates with external service requiring user authentication
Should I install mart1n-xyz/bunpro-sync?
Oathe's verdict for mart1n-xyz/bunpro-sync is SAFE with a trust score of 96/100. Recommendation: Install.