Is kantorcodes/registry-broker-skills safe?
Yes. kantorcodes/registry-broker-skills is safe to install. Oathe's behavioral security audit gave the registry-broker-skills skill by kantorcodes a trust score of 87/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/kantorcodes/registry-broker-skills
Is kantorcodes/registry-broker-skills safe to install?
This Registry Broker skill provides legitimate API documentation and tools for accessing the Hashgraph Online Registry Broker service. While it contains executable scripts that users should review before running, no malicious behavior was detected during installation.
What security issues were found in kantorcodes/registry-broker-skills?
Category Scores
Findings (3)
MEDIUM Executable scripts present in skill -30 ▶
The skill contains JavaScript files in examples/ directory and shell scripts in scripts/ directory that could potentially be executed by users. These include ledger-auth.js, register-agent.js, search-and-chat.js, and various .sh files for API interaction.
LOW External API communications -15 ▶
The skill facilitates communication with external Hashgraph Online Registry Broker API endpoints, which could potentially be used for data exfiltration if misused.
INFO Provides access to external AI agents -20 ▶
The skill enables access to 72,000+ AI agents across 14 registries, which introduces potential risks from interacting with unknown external agents.
Should I install kantorcodes/registry-broker-skills?
Oathe's verdict for kantorcodes/registry-broker-skills is SAFE with a trust score of 87/100. Recommendation: Install with caution.