What security grade does codmate have?

codmate is graded CAUTION by AgentSkillsHub's rule-based security scan (SlowMist 11 red-flag categories). Has caution flags — fine for personal trials; review credentials and maintainer before brand or production use.

Is codmate safe to install?

Security audit of loocor/codmate · Codex Skill by loocor · ★ 636

⚠ CAUTION Basic audit · rule-based scan · SlowMist 11 red-flag categories

Use with caution — codmate triggered warning flags in AgentSkillsHub's security scan. It may be fine for personal trials, but review its credential handling and maintainer before brand or production use.

What it is: CodMate is a macOS SwiftUI app for managing CLI AI sessions: browse, search, organize, resume, and review work produced by Codex, Claude Code, and Gemini CLI. It focuses on speed, a compact three-column UI, and “ship it” workflows like Project Review (Git Changes) and one-click Resume/New.

Red flags detected (1)

🚩 agent config theft

Audit summary

Security grade	⚠ CAUTION
Quality score	64/100
GitHub stars	636
Language	Swift
License	Apache-2.0
Last updated	2026-03-31

Check before you install

What credentials does it ask for, and where are they stored?
Is the maintainer identifiable and the repo actively maintained?
Read the install scripts and network calls before trusting it.

Run a live scan → Full details & install 5-dimension deep audit

This is AgentSkillsHub's free basic audit: an automated rule-based scan covering SlowMist's 11 red-flag categories (credential exfiltration, obfuscated payloads, sandbox escape, prompt injection, and more) across 117,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A CAUTION grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-07-03.