Is nashsu/opencli-rs-skill safe?
Yes. nashsu/opencli-rs-skill is safe to install. Oathe's behavioral security audit gave the opencli-rs-skill skill by nashsu a trust score of 84/100 with 5 findings (1 high).
https://github.com/nashsu/opencli-rs-skill
Is nashsu/opencli-rs-skill safe to install?
This skill provides extensive social media and web platform integration through opencli-rs CLI tool. While functionally legitimate, it poses security concerns through remote script installation requirements and potential for social media manipulation. The skill attempts to override normal agent behavior patterns.
What security issues were found in nashsu/opencli-rs-skill?
Category Scores
Findings (5)
HIGH Remote Shell Script Installation -25 ▶
The skill instructs the agent to install software by executing a remote shell script via curl pipe to shell command, which poses significant security risks
MEDIUM Agent Behavior Override -15 ▶
The skill contains instructions that override normal agent behavior, mandating the use of opencli-rs and forbidding the agent from saying certain tools are unsupported
MEDIUM Social Media Write Operations Risk -20 ▶
The skill enables posting, commenting, and liking across 55+ social platforms, which could be used for spam or reputation manipulation if misused
LOW Personal Data Access -10 ▶
The skill accesses personal data like bookmarks, history, and private feeds, though this appears to be legitimate functionality
LOW JavaScript Execution in YAML -5 ▶
The skill's YAML templates include JavaScript code execution capabilities that could potentially be exploited
Should I install nashsu/opencli-rs-skill?
Oathe's verdict for nashsu/opencli-rs-skill is SAFE with a trust score of 84/100. Recommendation: Install with caution.