Is silentcool/crusty-security safe?
Yes. silentcool/crusty-security is safe to install. Oathe's behavioral security audit gave the crusty-security skill by silentcool a trust score of 86/100 with 4 findings, none critical or high.
https://github.com/silentcool/crusty-security
Is silentcool/crusty-security safe to install?
Crusty Security appears to be a legitimate security monitoring tool for OpenClaw agents with appropriate functionality for its stated purpose. The main concerns are optional external data transmission to a dashboard service and the broad system privileges required for security scanning operations.
What security issues were found in silentcool/crusty-security?
Category Scores
Findings (4)
MEDIUM External Dashboard Integration -30 ▶
The skill sends automatic heartbeats every 5 minutes and can push scan results to crustysecurity.com when CRUSTY_API_KEY is configured. While optional and documented, this involves regular data transmission to external servers.
LOW Multiple Executable Scripts -15 ▶
The skill contains numerous executable shell scripts and Python code that perform security scanning operations. While legitimate for security tools, these have significant system access.
LOW Broad System Privileges -15 ▶
The security tool requires extensive access to filesystem, processes, configuration files, and network to perform its scanning functions. This is expected for security tools but represents significant privilege requirements.
LOW Automatic Cron Job Installation -10 ▶
The skill automatically installs several cron jobs for scheduled security scanning without explicit user confirmation during installation.
Should I install silentcool/crusty-security?
Oathe's verdict for silentcool/crusty-security is SAFE with a trust score of 86/100. Recommendation: Install with caution.