oathe
Oathe Security Badge

Is skill/go-security-vulnerability safe?

Yes. skill/go-security-vulnerability is safe to install. Oathe's behavioral security audit gave the go-security-vulnerability skill by skill a trust score of 95/100 with 1 finding, none critical or high. Report updated

https://clawhub.ai/skill/go-security-vulnerability

95
SAFE

Is skill/go-security-vulnerability safe to install?

This is a legitimate educational skill providing documentation for Go security vulnerability scanning using standard tools like govulncheck. The skill contains only documentation content with no malicious behavior detected, though it includes an install script for Go that wasn't executed during testing.

What security issues were found in skill/go-security-vulnerability?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 75/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (1)

MEDIUM Install script downloads external binaries -25 ▶

The skill metadata contains an install script that downloads Go 1.21.5 from golang.org and extracts it to /usr/local. While this is for legitimate Go installation, it represents code execution risk by downloading and extracting external binaries to system directories.

Should I install skill/go-security-vulnerability?

Oathe's verdict for skill/go-security-vulnerability is SAFE with a trust score of 95/100. Recommendation: Install.