Oathe Security Badge

Is wzh274728277/claude-md-sync safe?

https://github.com/wzh274728277/claude-md-sync

97
SAFE

This skill provides legitimate functionality to keep CLAUDE.md documentation synchronized with codebase changes by analyzing git commit history. The Python analysis script uses secure subprocess calls and shows no signs of malicious behavior.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 100/100 · 5%

Findings (1)

LOW Python script execution required -15 ▶

The skill instructs execution of analyze_commits.py script to analyze git commit history. The script uses subprocess calls to run git commands, but implementation appears secure with proper parameter handling.