Is alvinecarn/chief-creative-officer safe?
Use with caution. alvinecarn/chief-creative-officer is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the chief-creative-officer skill by alvinecarn a trust score of 66/100 with 7 findings (1 critical, 3 high).
https://github.com/openclaw/skills/tree/main/skills/alvinecarn/chief-creative-officer
Is alvinecarn/chief-creative-officer safe to install?
This skill presents significant prompt injection risks through explicit system instruction overrides and role redefinition attempts. While it contains no executable code and shows normal installation behavior, the sophisticated workflow instructions could enable agent behavior manipulation and unauthorized data collection through tool abuse.
What security issues were found in alvinecarn/chief-creative-officer?
Category Scores
Findings (7)
CRITICAL Explicit System Instruction Override -40 ▶
The skill contains explicit instructions to prioritize user preferences over system instructions, which is a direct prompt injection attack vector.
HIGH Agent Role Redefinition -20 ▶
The skill attempts to completely redefine the agent's role and identity, potentially overriding safety behaviors.
HIGH Template Variable Injection -15 ▶
The skill uses template variables that could be injection points for malicious instructions.
HIGH Agent Behavior Manipulation -50 ▶
The detailed workflow instructions could override normal agent safety behaviors and decision-making processes.
MEDIUM Social Engineering Potential -20 ▶
The skill's design enables sophisticated manipulation of agent behavior through creative task framing.
MEDIUM Tool-Enabled Data Collection -15 ▶
Instructions to use search and web scraping tools could be leveraged for unauthorized information gathering.
MEDIUM Structured Data Storage -10 ▶
Wiki document creation and management could be used to organize and store collected sensitive information.
Should I install alvinecarn/chief-creative-officer?
Oathe's verdict for alvinecarn/chief-creative-officer is CAUTION with a trust score of 66/100. Recommendation: Review before install.