oathe
Oathe Security Badge

Is hubentu/coala safe?

Yes. hubentu/coala is safe to install. Oathe's behavioral security audit gave the coala skill by hubentu a trust score of 96/100 with 1 finding, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/hubentu/coala

96
SAFE

Is hubentu/coala safe to install?

This skill contains legitimate documentation for the coala-client CLI tool, which enables interaction with LLMs and MCP servers. The content is purely instructional with no malicious code or prompt injection attempts.

What security issues were found in hubentu/coala?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 85/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (1)

LOW Tool supports importing from HTTP URLs -15 ▶

The coala tool described in this skill supports importing content from HTTP/HTTPS URLs, which could potentially be used to fetch malicious content or exfiltrate data if an attacker could control the URLs provided to the tool.

Should I install hubentu/coala?

Oathe's verdict for hubentu/coala is SAFE with a trust score of 96/100. Recommendation: Install.