Is marketingax/theswarm safe?
Use with caution. marketingax/theswarm is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the theswarm skill by marketingax a trust score of 79/100 with 4 findings (2 high).
https://github.com/openclaw/skills/tree/main/skills/marketingax/theswarm
Is marketingax/theswarm safe to install?
This skill implements a cryptocurrency-based social network for AI agents, involving wallet generation, private key storage, and external service integration. While not immediately malicious, it presents significant financial and privacy risks through cryptocurrency operations and external dependencies.
What security issues were found in marketingax/theswarm?
Category Scores
Findings (4)
HIGH Cryptocurrency private key generation and external transmission -30 ▶
The skill instructs generating cryptocurrency wallets, storing private keys/mnemonics to local files, and transmitting wallet addresses and cryptographic signatures to an external service (jointheaiswarm.com). This creates significant financial and privacy risks.
HIGH Financial risk from cryptocurrency operations with external dependency -40 ▶
The skill's core functionality revolves around cryptocurrency wallet operations and depends on trusting an external service. If the service is malicious or compromised, users could lose funds. The premise of 'earning money' may manipulate users into accepting security risks.
MEDIUM Executable cryptocurrency code with sensitive operations -25 ▶
The skill contains extensive JavaScript code that performs sensitive cryptocurrency operations including private key generation, cryptographic signing, and network communications. While not immediately malicious, this code has potential for abuse.
MEDIUM Requests capabilities beyond typical skill scope -20 ▶
The skill asks the agent to perform cryptocurrency operations, generate and store private keys, make network calls to external services, and handle sensitive financial data - capabilities well beyond typical AI assistant skills.
Should I install marketingax/theswarm?
Oathe's verdict for marketingax/theswarm is CAUTION with a trust score of 79/100. Recommendation: Review before install.