Is kj-script/pancake-swap-skills safe?
Yes. kj-script/pancake-swap-skills is safe to install. Oathe's behavioral security audit gave the pancake-swap-skills skill by kj-script a trust score of 89/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/kj-script/pancake-swap-skills
Is kj-script/pancake-swap-skills safe to install?
This is a legitimate DeFi trading skill for PancakeSwap that transparently declares all file accesses and security requirements. While it handles cryptocurrency private keys for trading functionality, this is properly documented and necessary for its intended purpose.
What security issues were found in kj-script/pancake-swap-skills?
Category Scores
Findings (3)
MEDIUM Cryptocurrency Private Key Access -25 ▶
Skill accesses cryptocurrency private keys stored in ~/.config/bsc_agent/wallet.json for blockchain transaction signing. While this is declared functionality, it poses inherent security risks.
LOW Financial Risk Exposure -10 ▶
Skill enables cryptocurrency trading which could result in financial losses through market volatility or transaction errors.
LOW Financial Skill Manipulation Risk -5 ▶
As a financial trading skill, prompt manipulation could potentially be used to trigger unintended transactions, though no injection vectors detected.
Should I install kj-script/pancake-swap-skills?
Oathe's verdict for kj-script/pancake-swap-skills is SAFE with a trust score of 89/100. Recommendation: Install with caution.