Is wrsmith108/plan-review-skill safe?
Yes. wrsmith108/plan-review-skill is safe to install. Oathe's behavioral security audit gave the plan-review-skill skill by wrsmith108 a trust score of 88/100 with 3 findings, none critical or high.
https://github.com/wrsmith108/plan-review-skill
Is wrsmith108/plan-review-skill safe to install?
This appears to be a legitimate plan review tool that spawns VP-perspective agents to analyze implementation plans. While it uses broad subagent permissions and complex orchestration that creates some attack surface, no malicious behavior was detected during installation or in the code review.
What security issues were found in wrsmith108/plan-review-skill?
Category Scores
Findings (3)
MEDIUM Broad Subagent Permissions -15 ▶
The skill spawns general-purpose subagents which have access to all tools including filesystem, shell, and network access. While this appears necessary for the plan review functionality, it creates a broader attack surface.
LOW Complex Agent Prompt -5 ▶
The agent-prompt.md file is very large and complex, making comprehensive security review more difficult and potentially hiding malicious instructions.
LOW Complex Multi-Agent Orchestration -15 ▶
The skill orchestrates multiple VP agents in parallel with complex data flow, creating potential for unexpected interactions or manipulation through crafted plan content.
Should I install wrsmith108/plan-review-skill?
Oathe's verdict for wrsmith108/plan-review-skill is SAFE with a trust score of 88/100. Recommendation: Install.