Oathe Security Badge

Is michaelversus/swiftfindrefs safe?

Yes. michaelversus/swiftfindrefs is safe to install. Oathe's behavioral security audit gave the swiftfindrefs skill by michaelversus a trust score of 95/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/michaelversus/swiftfindrefs

95
SAFE

Is michaelversus/swiftfindrefs safe to install?

SwiftFindRefs is a legitimate Swift development tool skill that provides instructions for using IndexStoreDB to find symbol references. The skill contains no malicious content and follows standard documentation patterns, with the primary concern being its dependency on external software installation.

What security issues were found in michaelversus/swiftfindrefs?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (2)

LOW External Software Installation Required -15

The skill instructs the agent to install external software using 'brew tap michaelversus/SwiftFindRefs https://github.com/michaelversus/SwiftFindRefs.git' and 'brew install swiftfindrefs'. This creates a dependency on external repositories that could potentially be compromised.

INFO Strong Imperative Language -5

The skill uses strong directive language like 'Mandatory for', 'Always run', 'Do not substitute', etc. While technically justified for proper tool usage, this creates rigid behavioral constraints.

Should I install michaelversus/swiftfindrefs?

Oathe's verdict for michaelversus/swiftfindrefs is SAFE with a trust score of 95/100. Recommendation: Install.