Birdbuddy

• Verdict: Pass
• Confidence: High
• Analyzed: Feb 21, 2026, 12:25 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and required credentials align with its stated purpose (accessing a Bird Buddy account) and show no signs of unrelated data access or hidden exfiltration.

This skill appears to do exactly what it says: it uses your Bird Buddy email/password (not SSO) to query your feeders via the pybirdbuddy library. Before installing, verify you trust the pybirdbuddy package source (review its GitHub/release page and recent commits). Protect credentials: prefer a dedicated account or revocable password, do not commit .env files to public repos, and store the .env in a secure location because run.py will read a .env file placed next to it. If you are uncomfortable supplying your main Bird Buddy credentials, create an account or change the password after use. Finally, ensure outbound network access from the environment is acceptable since the client will communicate with Bird Buddy servers.