Safety rating · all kinds
ikaijua/Awesome-AITools
Score 61/100 — Moderate public signals
Automated checks of public signals as of the date shown. Not a security audit, certification or endorsement, and not a statement about the people who maintain the project. Signals can be incomplete or out of date; each check shows its evidence and source so anyone can verify it.
Checks
- Credential and environment access — Found (15/15): The scan recorded a pass: No credential or environment access patterns were found in the scanned bytes.
- Known-bad indicators — Not found (0/15): The scan flagged this check: The scanned bytes match these known-bad indicators from the scanner's published pattern list: token- or credential-taking vocabulary (stealer, grabber, exfiltrate). Each match is a reproducible pattern match on the bytes named by the hash; re-running the published check on the same bytes reaches the same finding.
- Shell-outs and download-and-execute — Found (12/12): The scan recorded a pass: No shell-out or download-and-execute patterns were found in the scanned bytes.
- Install and postinstall hooks — Found (12/12): The scan recorded a pass: No install or postinstall hooks were found in the scanned bytes.
- Obfuscation and encoded payloads — Found (10/10): The scan recorded a pass: No obfuscation or encoded-payload signs were found in the scanned bytes.
- Outbound network references — Not found (0/10): The scan flagged this check: The scanned bytes reference outbound network activity to these domains: agilityrobotics.com, ai.google.dev, ai.nero.com, aistudio.google.com, aiweekly.co, antigravity.google, api.star-history.com, app.heygen.com, app.pixverse.ai, apptronik.com, arena.ai, artificialanalysis.ai, artificialwatch.com, arxiv.org, awesome.re, azure.microsoft.com, bailian.console.aliyun.com, benchgecko.ai, bfl.ai, bolt.new, bostondynamics.com, browser-use.com, cate.cero-ai.com, cdn.buymeacoffee.com, chat.deepseek.com, chat.qwen.ai, chat.together.ai, chat.z.ai, chatgpt.com, chattts.com, civitai.com, claude.ai, clawhub.ai, clipdrop.co, colab.research.google.com, console.anthropic.com, console.x.ai, contentauthenticity.org, create.wan.video, cursor.com, deepmind.google, developers.cloudflare.com, devin.ai, dify.ai, docs.parallel.ai, docs.perplexity.ai, docs.x.ai, dreamina.capcut.com, e
- Permission declarations vs behavior — Not found (0/10): The scan flagged this check: The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against.
- Provenance facts (weak signals) — Found (6/6): The scan recorded a pass: Provenance facts, labeled weak signals — they say where the bytes sit, not what the bytes do: source host: github.com; repository: ikaijua/Awesome-AITools; bytes scanned: 120371; fetched from: https://raw.githubusercontent.com/ikaijua/Awesome-AITools/HEAD/README.md.