Is matt998759/ned-analytics safe?
Yes. matt998759/ned-analytics is safe to install. Oathe's behavioral security audit gave the ned-analytics skill by matt998759 a trust score of 93/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/matt998759/ned-analytics
Is matt998759/ned-analytics safe to install?
This skill appears to be a legitimate Shopify analytics tool that queries the Ned API service. It contains standard API client functionality with proper error handling and no obvious security vulnerabilities or malicious behavior.
What security issues were found in matt998759/ned-analytics?
Category Scores
Findings (3)
MEDIUM External API requests with credentials -20 ▶
The skill makes HTTP requests to api.meetned.com with user's API key. While this appears to be legitimate functionality, it does transmit user credentials to external endpoints.
LOW Contains executable shell script -5 ▶
The skill includes a bash script that could be executed by the agent. The script appears benign and only makes API calls.
LOW API key exposure risk -10 ▶
The skill requires storing sensitive API credentials in environment variables, which could potentially be logged or exposed through agent output.
Should I install matt998759/ned-analytics?
Oathe's verdict for matt998759/ned-analytics is SAFE with a trust score of 93/100. Recommendation: Install.