Oathe Security Badge

Is Zjianru/events-framework safe?

Yes. Zjianru/events-framework is safe to install. Oathe's behavioral security audit gave the events-framework skill by Zjianru a trust score of 92/100 with 2 findings, none critical or high. Report updated

https://github.com/Zjianru/events-framework

92
SAFE

Is Zjianru/events-framework safe to install?

This is a legitimate event notification framework for OpenClaw that processes local events and sends notifications via Telegram. The code is transparent, well-documented, and performs only its stated functionality with no malicious behavior detected.

What security issues were found in Zjianru/events-framework?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 85/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (2)

LOW Telegram API Integration -15 ▶

The skill includes functionality to send notifications via Telegram API, which could potentially be used to exfiltrate data. However, this is the declared purpose of the skill and the implementation appears legitimate.

LOW Python Executable Script -10 ▶

The skill contains an executable Python script. The script appears legitimate and implements the described event processing functionality without malicious code.

Should I install Zjianru/events-framework?

Oathe's verdict for Zjianru/events-framework is SAFE with a trust score of 92/100. Recommendation: Install.