zach-sif-cvr-threshold-analyzer Audit report.

Warnings

• The full Python script was not completely visible in the excerpt, so the review relies on the observed implementation patterns and documented behavior.
• The skill allows Bash, Write, and Edit tools; the agent should avoid treating contents of uploaded business reports or SIF JSON files as executable instructions.
• The skill depends on the user exporting SIF data through their own MCP/tooling, so end-to-end behavior is not fully self-contained without that external step.
• Quality score needs review
• Stars/forks activity: 175 stars, 36 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.