recruiting-reminder Audit report.

Warnings

• SKILL.md references scripts/fetch_mail.py, scripts/event_model.py, scripts/state_store.py, references/event-schema.md, references/mail-sync-contract.md, and references/legacy-dual-base.md, but these are not present in the submitted skill directory listing; the skill cannot run as-is without them.
• No explicit setup, prerequisites, or dependency information is provided in SKILL.md, such as Python version, required packages, IMAP connection requirements, or a config file schema example.
• The skill instructs the agent to execute an external ../.offerloop-runtime/scripts/install_mode.py before processing anything; this is a supply-chain/security consideration and should be documented, pinned, or vendored.
• SKILL.md is very dense with many hard gates and contracts; a concise quick-start checklist at the top would reduce the risk of agent missteps.
• Low GitHub adoption signal
• Quality score needs review
• GitHub adoption: 13 GitHub stars
• Stars/forks activity: 13 stars, 0 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.