Is Charpup/triadev safe?
Yes. Charpup/triadev is safe to install. Oathe's behavioral security audit gave the triadev skill by Charpup a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/Charpup/triadev
Is Charpup/triadev safe to install?
TriadDev appears to be a legitimate development workflow orchestration tool that integrates multiple development-focused skills. While it contains executable code and modifies the user's environment during installation, these behaviors are appropriate for a development tool and no malicious activity was detected.
What security issues were found in Charpup/triadev?
Category Scores
Findings (3)
LOW Install script modifies user environment -10 ▶
The install.sh script adds the tool's bin directory to the user's PATH by modifying ~/.bashrc. While standard for development tools, this does modify the user's shell environment.
LOW Python subprocess execution -5 ▶
The orchestrator.py uses subprocess.run() calls for git operations and other system commands. The inputs appear controlled but represent potential code execution paths.
INFO Complex multi-skill integration -15 ▶
Tool orchestrates multiple other skills (planning-with-files, task-workflow, tdd-sdd-development) which increases potential attack surface, though this is its legitimate purpose.
Should I install Charpup/triadev?
Oathe's verdict for Charpup/triadev is SAFE with a trust score of 92/100. Recommendation: Install.