Is artur-zhdan/humanize safe?
Yes. artur-zhdan/humanize is safe to install. Oathe's behavioral security audit gave the humanize skill by artur-zhdan a trust score of 96/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/artur-zhdan/humanize
Is artur-zhdan/humanize safe to install?
The humanize-ai skill is a documentation-only writing assistant with no executable code, no prompt injection, and no data exfiltration mechanisms. All three files are legitimate editorial content (SKILL.md, README.md, _meta.json), the clone contacted only GitHub as expected, and all canary files remained intact. The sole noteworthy finding is a minor version inconsistency between the skill content and its registry metadata.
What security issues were found in artur-zhdan/humanize?
Category Scores
Findings (3)
LOW Version metadata inconsistency between SKILL.md and _meta.json -10 ▶
The SKILL.md frontmatter declares version 2.1.1 while _meta.json declares version 1.0.0. This suggests the skill content was updated without a corresponding registry metadata bump, or the metadata was not synchronized. While not a security issue, it undermines provenance confidence.
INFO Write and Edit tool access declared -5 ▶
The skill requests Write and Edit permissions, which is expected for a document-editing assistant. However, it represents a broader permission surface than a read-only skill. No exfiltration instructions are present, and usage is consistent with the skill's stated purpose.
INFO Canary files accessed by audit infrastructure (not skill) 0 ▶
Honeypot files (.env, .ssh/id_rsa, .aws/credentials, .npmrc, .docker/config.json, gcloud credentials) were opened at timestamps 1771931033 (pre-clone, during audit setup) and 1771931050 (post-install, during audit teardown verification). Process execution timeline confirms no skill-related process was responsible. All files remained unmodified.
Should I install artur-zhdan/humanize?
Oathe's verdict for artur-zhdan/humanize is SAFE with a trust score of 96/100. Recommendation: Install.