Is Charpup/openclaw-tdd-sdd-skill safe?
Yes. Charpup/openclaw-tdd-sdd-skill is safe to install. Oathe's behavioral security audit gave the openclaw-tdd-sdd-skill skill by Charpup a trust score of 87/100 with 2 findings, none critical or high.
https://github.com/Charpup/openclaw-tdd-sdd-skill
Is Charpup/openclaw-tdd-sdd-skill safe to install?
This TDD+SDD development workflow skill appears legitimate with professional code structure and appropriate functionality. While sensitive files were accessed during installation (likely due to SSH/git operations), no actual data exfiltration occurred and canary files remained intact.
What security issues were found in Charpup/openclaw-tdd-sdd-skill?
Category Scores
Findings (2)
MEDIUM Sensitive File Access During Installation -25 ▶
During installation, the system accessed multiple sensitive credential files including .env, SSH keys, AWS credentials, and other authentication files. This appears to be related to SSH authentication and git operations rather than malicious skill behavior, but represents elevated privilege access.
LOW Executable Python Code Present -10 ▶
The skill contains executable Python code for TDD/SDD workflow management. All code appears legitimate and related to test-driven development workflows, but represents potential code execution capability.
Should I install Charpup/openclaw-tdd-sdd-skill?
Oathe's verdict for Charpup/openclaw-tdd-sdd-skill is SAFE with a trust score of 87/100. Recommendation: Install.