Is benny-conn/trackyard safe?
Yes. benny-conn/trackyard is safe to install. Oathe's behavioral security audit gave the trackyard skill by benny-conn a trust score of 83/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/benny-conn/trackyard
Is benny-conn/trackyard safe to install?
The Trackyard skill provides legitimate music search and download functionality through a clean bash script implementation. While monitoring detected concerning access to sensitive files, no actual exfiltration occurred and the skill code contains no malicious logic.
What security issues were found in benny-conn/trackyard?
Category Scores
Findings (3)
MEDIUM Sensitive File Access During Monitoring -35 ▶
System monitoring detected access to sensitive canary files including .env, SSH private keys, and AWS credentials. While no files were modified and the skill code contains no logic to read these files, the access pattern is concerning.
LOW External API Dependency -20 ▶
The skill depends on an external service (trackyard.com) and requires users to provide their own API key, creating a trust dependency on a third-party service.
LOW File Download Capability -10 ▶
The skill downloads .mp3 files to the current directory, which could potentially consume disk space or be used to write files to the filesystem.
Should I install benny-conn/trackyard?
Oathe's verdict for benny-conn/trackyard is SAFE with a trust score of 83/100. Recommendation: Install with caution.