Is reiy-leo/agent-reach-bak safe?
Yes. reiy-leo/agent-reach-bak is safe to install. Oathe's behavioral security audit gave the agent-reach-bak skill by reiy-leo a trust score of 91/100 with 4 findings, none critical or high.
https://clawhub.ai/reiy-leo/agent-reach-bak
Is reiy-leo/agent-reach-bak safe to install?
Agent Reach is a legitimate web scraping skill that provides access to 14 major platforms for data collection. While the skill itself contains no malicious code and passed all integrity checks, it does expand the agent's attack surface by providing extensive external service access capabilities that could theoretically be misused.
What security issues were found in reiy-leo/agent-reach-bak?
Category Scores
Findings (4)
MEDIUM External service access capabilities -25 ▶
The skill provides extensive instructions for accessing external web services (Twitter, Reddit, YouTube, etc.) which could potentially be misused for data exfiltration if combined with malicious prompts instructing the agent to post sensitive data.
LOW External URL references -5 ▶
The skill references external GitHub URLs for installation guides, which could theoretically be modified to contain malicious instructions, though this requires compromising the referenced repository.
INFO Expanded attack surface -20 ▶
While the skill appears legitimate for web scraping purposes, it significantly expands an agent's potential attack surface by providing access to multiple external web services and platforms.
INFO Installation network activity -5 ▶
Normal network connections during installation to clawhub.ai and CDN infrastructure for downloading the skill package.
Should I install reiy-leo/agent-reach-bak?
Oathe's verdict for reiy-leo/agent-reach-bak is SAFE with a trust score of 91/100. Recommendation: Install with caution.