Is jneless/volcengine-tos-vectors-skills safe?
Yes. jneless/volcengine-tos-vectors-skills is safe to install. Oathe's behavioral security audit gave the volcengine-tos-vectors-skills skill by jneless a trust score of 89/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/jneless/volcengine-tos-vectors-skills
Is jneless/volcengine-tos-vectors-skills safe to install?
This skill provides legitimate documentation and utilities for TOS Vectors, a cloud-based vector database service. The code appears benign and follows standard patterns for API integration, with no evidence of malicious behavior.
What security issues were found in jneless/volcengine-tos-vectors-skills?
Category Scores
Findings (3)
MEDIUM Environment Variable Access -15 ▶
The skill's Python scripts access environment variables containing API credentials (TOS_ACCESS_KEY, TOS_SECRET_KEY, TOS_ACCOUNT_ID). While this is standard practice for API authentication, it represents access to sensitive data.
LOW Contains Executable Python Scripts -15 ▶
The skill includes Python scripts in the scripts/ directory that demonstrate TOS Vectors API usage. While the code appears legitimate, it represents executable content within the skill.
LOW Requires API Credentials -10 ▶
The skill requires TOS Vectors service credentials to function, which could potentially access or modify vector databases if valid credentials are provided.
Should I install jneless/volcengine-tos-vectors-skills?
Oathe's verdict for jneless/volcengine-tos-vectors-skills is SAFE with a trust score of 89/100. Recommendation: Install.