oathe
Oathe Security Badge

Is wzh274728277/claude-md-sync safe?

Yes. wzh274728277/claude-md-sync is safe to install. Oathe's behavioral security audit gave the claude-md-sync skill by wzh274728277 a trust score of 97/100 with 1 finding, none critical or high. Report updated

https://github.com/wzh274728277/claude-md-sync

97
SAFE

Is wzh274728277/claude-md-sync safe to install?

This skill provides legitimate functionality to keep CLAUDE.md documentation synchronized with codebase changes by analyzing git commit history. The Python analysis script uses secure subprocess calls and shows no signs of malicious behavior.

What security issues were found in wzh274728277/claude-md-sync?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 100/100 · 5%

Findings (1)

LOW Python script execution required -15 ▶

The skill instructs execution of analyze_commits.py script to analyze git commit history. The script uses subprocess calls to run git commands, but implementation appears secure with proper parameter handling.

Should I install wzh274728277/claude-md-sync?

Oathe's verdict for wzh274728277/claude-md-sync is SAFE with a trust score of 97/100. Recommendation: Install.