scope Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• The skill depends on the existence of CLAUDE.md for existing projects; if missing, it falls back to user input only, which is acceptable but could be documented more explicitly.
• The script resolution uses `find ~/.claude` which may not work in all environments; consider using a path relative to the skill's own directory for robustness.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Stars/forks activity: 127 stars, 22 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, network or browser surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.