Oathe Security Badge

Is skill/proton-pass safe?

Yes. skill/proton-pass is safe to install. Oathe's behavioral security audit gave the proton-pass skill by skill a trust score of 95/100 with 3 findings, none critical or high. Report updated

https://clawhub.ai/skill/proton-pass

95
SAFE

Is skill/proton-pass safe to install?

This skill provides comprehensive documentation for the Proton Pass CLI password manager and appears completely legitimate. No malicious behavior, prompt injection attempts, or unauthorized data access was detected during analysis.

What security issues were found in skill/proton-pass?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (3)

INFO References credential files -10

The documentation references various credential files (.env, SSH keys, AWS credentials) as part of legitimate Proton Pass CLI functionality for password management.

INFO Network connections during installation -5

Installation made legitimate network connections to clawhub.ai and Proton endpoints for fetching skill content.

LOW Powerful credential management capabilities -10

While legitimate, this skill provides comprehensive guidance for managing sensitive credentials, SSH keys, and passwords through Proton Pass CLI.

Should I install skill/proton-pass?

Oathe's verdict for skill/proton-pass is SAFE with a trust score of 95/100. Recommendation: Install.