Oathe Security Badge

Is tag-assistant/github-cli safe?

Yes. tag-assistant/github-cli is safe to install. Oathe's behavioral security audit gave the github-cli skill by tag-assistant a trust score of 95/100 with 1 finding, none critical or high. Report updated

https://clawhub.ai/tag-assistant/github-cli

95
SAFE

Is tag-assistant/github-cli safe to install?

This is a comprehensive, legitimate GitHub CLI reference skill containing only documentation and code examples. The skill consists entirely of markdown documentation with no executable code, scripts, or malicious content. All monitoring systems confirm normal installation behavior with no suspicious file access or network activity.

What security issues were found in tag-assistant/github-cli?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 75/100 · 5%

Findings (1)

LOW Comprehensive sensitive operation documentation -25

This skill provides extensive documentation for GitHub CLI operations including sensitive functions like managing secrets, tokens, API access, and repository operations. While the skill itself contains no executable code, it serves as a comprehensive reference that could assist in automating GitHub operations if combined with execution capabilities.

Should I install tag-assistant/github-cli?

Oathe's verdict for tag-assistant/github-cli is SAFE with a trust score of 95/100. Recommendation: Install.