Oathe Security Badge

Is pfrederiksen/ghin-golf-tracker safe?

https://github.com/pfrederiksen/ghin-golf-tracker

99
SAFE

The GHIN Golf Tracker skill is a legitimate golf statistics analysis tool that reads JSON data files and generates reports. It contains only safe Python code with proper input validation and no dangerous operations.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 100/100 · 5%

Findings (1)

LOW Contains executable Python script -5

The skill includes a Python script (ghin_stats.py) that can be executed. However, the script is well-designed with proper input validation, restricts file access to .json files only, uses only standard library imports, and performs no network operations or subprocess execution.