OpenAgentSkill
GitHub200+

Skill audit report

reports Audit report.

Use when creating, previewing, updating, scheduling, or exploring Costory reports. Route by intent: scheduled Slack/Teams/email sharing (Schedule — ask before build) vs explain last-month cost with preview-first DIGEST (Explain — chat preview required; not query+compare). Workflows are named, never lettered. DIGEST AI is opt-in via display: \"summary\" and/or enableAiInvestigation — both slower. Covers GRAPH_SNAPSHOT, TOP_FLOP, DASHBOARD_PDF, context-first inheritance, destinations after channel type is known, and delivery safety. Call get_skill with skillId \"reports\" before create_report or substantial report work.

EXPERIMENTAL · REVIEWNeeds reviewGenerated Oct 21, 2026Heuristic metadata audit
72
Audit
70
Trust
49
Quality
75
Security
100
Maintain
92
Install

OpenAgentSkill Trust Score

70
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

FAIL

30

2 GitHub stars

Stars/forks activity

FAIL

32

2 stars, 1 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

100

5d since push

License clarity

PASS

86

Apache-2.0

README/SKILL.md completeness

PASS

94

Metadata includes enough usage and workflow context

Dependency/runtime risk

INFO

64

credential or environment access, database surface

Install availability

PASS

92

npx skills add costory-io/costory-finops-mcp-skills --skill reports

Install command safety

PASS

92

standard package or runtime install path

Permission surface

WARN

48

secrets or environment access, filesystem or document access

Repository evidence

PASS

86

https://github.com/costory-io/costory-finops-mcp-skills/tree/607562e9b5c51803b4c69c1568b950506a925155/plugins/costory/skills/reports

Review status

WARN

46

AI review approval is missing

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

6 Passed · 17 Needs review

Install path

92

PASS

npx skills add costory-io/costory-finops-mcp-skills --skill reports

Repository

88

PASS

https://github.com/costory-io/costory-finops-mcp-skills/tree/607562e9b5c51803b4c69c1568b950506a925155/plugins/costory/skills/reports

License

86

PASS

Apache-2.0

Maintenance

100

PASS

5d since push

AI review

55

CHECK

Review approval is missing

README/SKILL.md completeness

94

PASS

Usable description available

Dependency risk

64

CHECK

credential or environment access, database surface

Install command safety

92

PASS

standard package or runtime install path

Permission surface

48

FIX

secrets or environment access, filesystem or document access

Stars/forks activity

32

FIX

2 stars, 1 forks; issue activity unavailable in current metadata

Adoption

42

CHECK

2 GitHub stars

Financial decision safety

58

CHECK

Research-only use: do not treat output as financial advice or execute a position without human approval.

Warnings

  • Permission surface may require sandboxing
  • Financial research output is not financial advice; require human review before any live investment decision
  • Low GitHub adoption signal
  • AI review approval is missing
  • Financial research output is not financial advice; require human review before any live investment decision.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, filesystem or document access
  • GitHub adoption: 2 GitHub stars
  • Stars/forks activity: 2 stars, 1 forks; issue activity unavailable in current metadata
  • Permission surface: secrets or environment access, filesystem or document access
  • Review status: AI review approval is missing

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next

article-writing

Write articles, guides, blog posts, tutorials, newsletter issues, and other long-form content in a distinctive voice derived from supplied examples or brand guidance. Use when the user wants polished written content longer than a paragraph, especially when voice consistency, structure, and credibility matter.

272K Stars · Audit report

extension-points

Own MSBuild import and hook discovery. USE FOR: CustomBefore/CustomAfter hooks, ordered wildcard and NuGet auto-imports, control properties, build/buildTransitive packed layout, package ID and file-name matching, per-TFM forwarders, and tracing why assets or hooks are missing, broken, or replaced. An import guard remains in scope when it is one defect in a broader hook/import flow. DO NOT USE for a focused safety verdict on whether one specific Import needs Exists or is an intentionally unguarded package contract; use msbuild-antipatterns. NEVER INVOKE when imports and hook placement already work and the request is only target Inputs/Outputs, incremental skipping, or FileWrites clean tracking; use incremental-build or target-authoring. Exclude props-versus-targets placement and non-MSBuild systems.

5.6K Stars · Audit report

openadapt-gui-write

Your AI agent decides what to enter. OpenAdapt enters it in the app and checks that it saved.

1.8K Stars · Audit report