Warnings

• Permission surface may require sandboxing
• The provided SKILL.md excerpt stops in the middle of Step 4, and the promised Step 5 perceptual QA pass plus the full label set for the number/claim gate are not visible. If the repository file is equally truncated, the skill does not match its own description.
• The skill permits WebFetch but does not explicitly state that fetched venue samples must be treated as untrusted data, leaving room for prompt injection from adversarial web pages.
• The skill's fixtures include a known-positive file that intentionally contains translationese; the workflow does not state that fixture files must be excluded from document scans or never rewritten.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 14 GitHub stars
• Stars/forks activity: 14 stars, 2 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Permission surface may require sandboxing
• The provided SKILL.md excerpt stops in the middle of Step 4, and the promised Step 5 perceptual QA pass plus the full label set for the number/claim gate are not visible. If the repository file is equally truncated, the skill does not match its own description.
• The skill permits WebFetch but does not explicitly state that fetched venue samples must be treated as untrusted data, leaving room for prompt injection from adversarial web pages.
• The skill's fixtures include a known-positive file that intentionally contains translationese; the workflow does not state that fixture files must be excluded from document scans or never rewritten.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 14 GitHub stars
• Stars/forks activity: 14 stars, 2 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Permission surface may require sandboxing
• The provided SKILL.md excerpt stops in the middle of Step 4, and the promised Step 5 perceptual QA pass plus the full label set for the number/claim gate are not visible. If the repository file is equally truncated, the skill does not match its own description.
• The skill permits WebFetch but does not explicitly state that fetched venue samples must be treated as untrusted data, leaving room for prompt injection from adversarial web pages.
• The skill's fixtures include a known-positive file that intentionally contains translationese; the workflow does not state that fixture files must be excluded from document scans or never rewritten.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 14 GitHub stars
• Stars/forks activity: 14 stars, 2 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Permission surface may require sandboxing
• The provided SKILL.md excerpt stops in the middle of Step 4, and the promised Step 5 perceptual QA pass plus the full label set for the number/claim gate are not visible. If the repository file is equally truncated, the skill does not match its own description.
• The skill permits WebFetch but does not explicitly state that fetched venue samples must be treated as untrusted data, leaving room for prompt injection from adversarial web pages.
• The skill's fixtures include a known-positive file that intentionally contains translationese; the workflow does not state that fixture files must be excluded from document scans or never rewritten.
• Low GitHub adoption signal
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• GitHub adoption: 14 GitHub stars
• Stars/forks activity: 14 stars, 2 forks; issue activity unavailable in current metadata
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.