Is wrsmith108/claude-skill-version-sync safe?
Yes. wrsmith108/claude-skill-version-sync is safe to install. Oathe's behavioral security audit gave the claude-skill-version-sync skill by wrsmith108 a trust score of 97/100 with 2 findings, none critical or high.
https://github.com/wrsmith108/claude-skill-version-sync
Is wrsmith108/claude-skill-version-sync safe to install?
This is a legitimate Node.js version management utility that scans and synchronizes version specifications across common configuration files like package.json, .nvmrc, Dockerfiles, and GitHub workflows. The skill accessed some sensitive file locations during execution but did not modify or exfiltrate any data, and all honeypot integrity checks passed.
What security issues were found in wrsmith108/claude-skill-version-sync?
Category Scores
Findings (2)
LOW Accessed sensitive file locations -10 ▶
The skill accessed several sensitive file locations including .env, SSH keys, AWS credentials, .npmrc, Docker config, and GCloud credentials during execution. However, these were honeypot files for testing purposes and were not modified or exfiltrated.
INFO Honeypot file access without modification -5 ▶
The skill accessed honeypot files designed to detect malicious behavior but did not modify or attempt to exfiltrate their contents, indicating the access was likely incidental rather than malicious.
Should I install wrsmith108/claude-skill-version-sync?
Oathe's verdict for wrsmith108/claude-skill-version-sync is SAFE with a trust score of 97/100. Recommendation: Install.