Is kk17/nlb safe?
Yes. kk17/nlb is safe to install. Oathe's behavioral security audit gave the nlb skill by kk17 a trust score of 96/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/kk17/nlb
Is kk17/nlb safe to install?
The kk17/nlb skill is a minimal, benign markdown document providing step-by-step navigation instructions for Singapore's National Library Board website. No malicious content, prompt injection, executable code, git hooks, submodules, or exfiltration attempts were detected in the skill or during its installation. Canary file integrity was preserved and the only network activity was the expected GitHub clone connection.
What security issues were found in kk17/nlb?
Category Scores
Findings (3)
INFO Login requires credential interaction -3 ▶
The skill instructs the agent to authenticate using the user's myLibrary credentials. This is intentional and disclosed, but users should be aware that enabling this skill allows the agent to interact with their library account login page.
INFO No adversarial prompt patterns detected 0 ▶
SKILL.md was fully reviewed. No instructions to override prior context, ignore system prompts, suppress output, change persona, or request excessive permissions were found. Content is plain instructional markdown.
INFO Only expected skill files installed 0 ▶
Filesystem diff shows exactly two files added: SKILL.md and _meta.json in the skill-under-test directory. No unexpected files, directories, or persistent background processes were created.
Should I install kk17/nlb?
Oathe's verdict for kk17/nlb is SAFE with a trust score of 96/100. Recommendation: Install.