Caveat verdict
aimlapi-safety
aiml-safety
The skill performs content moderation and safety checks using AI guardrails, which seems to be a safe and legitimate operation.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (2)
Possible hardcoded credential
README.md ยท code ยท API_KEY="your-key-here
Python os.getenv โ reads environment variable
scripts/check_safety.py ยท prose ยท downgraded ยท os.getenv(
Permissions & capabilities
No declared permissions โ minimal attack surface.
Is this flag fair?
Thanks โ recorded.