Is bramdo/quantum-lab safe?
Yes. bramdo/quantum-lab is safe to install. Oathe's behavioral security audit gave the quantum-lab skill by bramdo a trust score of 97/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/bramdo/quantum-lab
Is bramdo/quantum-lab safe to install?
This skill appears to be a legitimate tool for quantum computing development that provides a wrapper for running Python scripts in a qiskit virtual environment. The skill contains a well-designed shell script with proper safety measures and shows no signs of malicious intent. All canary files remained intact during installation, indicating no data exfiltration attempts.
What security issues were found in bramdo/quantum-lab?
Category Scores
Findings (3)
MEDIUM File system access during installation -5 ▶
The installation process accessed sensitive file paths including .env, .ssh/id_rsa, and .aws/credentials, though no exfiltration occurred
LOW Executable shell script present -10 ▶
The skill contains a shell script (qexec.sh) that activates a Python virtual environment and executes commands, though the script appears safe and well-designed
LOW General code execution capabilities -5 ▶
The skill enables execution of arbitrary Python commands within a specified quantum computing environment, which carries inherent risks if the target repository contains malicious code
Should I install bramdo/quantum-lab?
Oathe's verdict for bramdo/quantum-lab is SAFE with a trust score of 97/100. Recommendation: Install.