Is kai-familiar/catallax safe?
Yes. kai-familiar/catallax is safe to install. Oathe's behavioral security audit gave the catallax skill by kai-familiar a trust score of 92/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/kai-familiar/catallax
Is kai-familiar/catallax safe to install?
This skill provides legitimate functionality for interacting with the Catallax decentralized work protocol on Nostr. While monitoring detected some file system activity during installation, all canary files remained intact indicating no data exfiltration occurred.
What security issues were found in kai-familiar/catallax?
Category Scores
Findings (2)
MEDIUM File System Access During Installation -15 ▶
Monitoring detected access attempts to sensitive files (.env, SSH keys, AWS credentials) during skill installation. However, all canary files remained intact, suggesting no actual data exfiltration occurred.
LOW Bash Command Execution Instructions -10 ▶
The skill instructs the agent to execute bash commands using the 'nak' CLI tool for Nostr protocol operations. These appear to be legitimate commands for the stated purpose.
Should I install kai-familiar/catallax?
Oathe's verdict for kai-familiar/catallax is SAFE with a trust score of 92/100. Recommendation: Install.