Is saubade32/product-management-skill safe?
Use with caution. saubade32/product-management-skill is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the product-management-skill skill by saubade32 a trust score of 72/100 with 4 findings (1 high).
https://github.com/saubade32/product-management-skill
Is saubade32/product-management-skill safe to install?
This skill presents legitimate educational content about product management frameworks but contains concerning executable files that users are encouraged to download and run. While the educational material appears genuine, the binary distribution mechanism poses significant security risks.
What security issues were found in saubade32/product-management-skill?
Category Scores
Findings (4)
HIGH Executable Binary Distribution -80 ▶
The skill contains a zip file (cytogamy/skill_management_product_2.6.zip) that the README encourages users to download and execute. The documentation mentions running .exe and .msi files, indicating the presence of executable binaries.
MEDIUM Potential Data Access via Executable -20 ▶
While the skill content itself appears benign, the executable zip file that users are encouraged to download could potentially contain code that accesses sensitive data.
MEDIUM Mixed Legitimate and Suspicious Content -70 ▶
The skill combines legitimate educational content about product management with suspicious executable distribution, creating a potentially deceptive package.
LOW Standard Git Operations -10 ▶
Clone behavior was normal with expected GitHub connections and standard git operations.
Should I install saubade32/product-management-skill?
Oathe's verdict for saubade32/product-management-skill is CAUTION with a trust score of 72/100. Recommendation: Review before install.