Warnings

• Permission surface may require sandboxing
• The SKILL.md description excludes domain analysis, but the RESEARCH phase includes bounded context mapping, creating potential overlap with the dedicated domain-analysis skill.
• The skill relies on web search and context7 but does not explicitly state that external content must be treated as data, not instructions, leaving a small prompt-injection surface.
• The Output Structure section in SKILL.md appears truncated in the submitted excerpt, so the complete expected output file set is not fully visible.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Permission surface may require sandboxing
• The SKILL.md description excludes domain analysis, but the RESEARCH phase includes bounded context mapping, creating potential overlap with the dedicated domain-analysis skill.
• The skill relies on web search and context7 but does not explicitly state that external content must be treated as data, not instructions, leaving a small prompt-injection surface.
• The Output Structure section in SKILL.md appears truncated in the submitted excerpt, so the complete expected output file set is not fully visible.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Permission surface may require sandboxing
• The SKILL.md description excludes domain analysis, but the RESEARCH phase includes bounded context mapping, creating potential overlap with the dedicated domain-analysis skill.
• The skill relies on web search and context7 but does not explicitly state that external content must be treated as data, not instructions, leaving a small prompt-injection surface.
• The Output Structure section in SKILL.md appears truncated in the submitted excerpt, so the complete expected output file set is not fully visible.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Permission surface may require sandboxing
• The SKILL.md description excludes domain analysis, but the RESEARCH phase includes bounded context mapping, creating potential overlap with the dedicated domain-analysis skill.
• The skill relies on web search and context7 but does not explicitly state that external content must be treated as data, not instructions, leaving a small prompt-injection surface.
• The Output Structure section in SKILL.md appears truncated in the submitted excerpt, so the complete expected output file set is not fully visible.
• Quality score needs review
• Permission surface needs review: secrets or environment access, filesystem or document access
• Permission surface: secrets or environment access, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.