Is meimakes/nag safe?

https://github.com/openclaw/skills/tree/main/skills/meimakes/nag

99
SAFE

This skill is a legitimate productivity tool that provides a persistent reminder system using JSON configuration files, cron jobs, and HEARTBEAT.md integration. No security risks were identified - it contains no prompt injection, data exfiltration attempts, or malicious code execution.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 100/100 · 5%

Findings (1)

INFO Benign shell script present -5 ▶

The skill includes a shell script migrate-heartbeat.sh that outputs documentation text to stdout. The script contains no dangerous commands and serves only to print configuration instructions.