oathe
Oathe Security Badge

Is wrsmith108/claude-skill-security-auditor safe?

Yes. wrsmith108/claude-skill-security-auditor is safe to install. Oathe's behavioral security audit gave the claude-skill-security-auditor skill by wrsmith108 a trust score of 98/100 with 1 finding, none critical or high. Report updated

https://github.com/wrsmith108/claude-skill-security-auditor

98
SAFE

Is wrsmith108/claude-skill-security-auditor safe to install?

This skill is a legitimate npm security audit tool that runs 'npm audit' commands to identify vulnerabilities and generate actionable reports. The code execution is expected, controlled, and limited to the intended npm audit functionality. No security vulnerabilities or malicious behavior were detected.

What security issues were found in wrsmith108/claude-skill-security-auditor?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (1)

LOW Executes npm audit command -10 ▶

The skill executes 'npm audit --json' using Node.js execSync to gather vulnerability data. While this is the intended functionality and the command is hardcoded (not user-controlled), it does represent code execution.

Should I install wrsmith108/claude-skill-security-auditor?

Oathe's verdict for wrsmith108/claude-skill-security-auditor is SAFE with a trust score of 98/100. Recommendation: Install.