Is metatronsdoob369/hk101-living-rag safe?
Yes. metatronsdoob369/hk101-living-rag is safe to install. Oathe's behavioral security audit gave the hk101-living-rag skill by metatronsdoob369 a trust score of 97/100 with 1 finding, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/metatronsdoob369/hk101-living-rag
Is metatronsdoob369/hk101-living-rag safe to install?
This skill implements a simple RAG (Retrieval Augmented Generation) system for querying local documents using OpenAI's API. The code appears legitimate with standard functionality and no malicious behavior detected during installation.
What security issues were found in metatronsdoob369/hk101-living-rag?
Category Scores
Findings (1)
MEDIUM Configurable file access parameter -10 ▶
The docsPath parameter allows users to specify arbitrary directories for document access. While this is legitimate functionality for a RAG system, it could potentially be used to read sensitive files if users specify inappropriate paths or use path traversal techniques.
Should I install metatronsdoob369/hk101-living-rag?
Oathe's verdict for metatronsdoob369/hk101-living-rag is SAFE with a trust score of 97/100. Recommendation: Install.