Is chenpinji/ghggh safe?
Yes. chenpinji/ghggh is safe to install. Oathe's behavioral security audit gave the ghggh skill by chenpinji a trust score of 86/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/chenpinji/ghggh
Is chenpinji/ghggh safe to install?
This skill provides legitimate GitHub repository statistics functionality (star counts and lines of code) using standard development tools. While it requires shell command execution and temporary file system access, the operations are appropriate for its stated purpose and show no signs of malicious intent.
What security issues were found in chenpinji/ghggh?
Category Scores
Findings (4)
MEDIUM Shell command execution required -20 ▶
The skill requires executing shell commands including git clone and cloc for repository analysis. While these are legitimate tools for the stated purpose, they represent elevated execution privileges.
LOW Package installation suggested -5 ▶
The skill suggests installing the cloc package via sudo apt install or pip install, which could modify the system package state.
LOW Requests elevated agent permissions -12 ▶
The skill instructs the agent to perform shell operations and network requests beyond basic API calls, though for legitimate purposes.
LOW Temporary file system usage -7 ▶
The skill creates temporary files in /tmp/repo-stat for repository analysis, though it includes cleanup instructions.
Should I install chenpinji/ghggh?
Oathe's verdict for chenpinji/ghggh is SAFE with a trust score of 86/100. Recommendation: Install.