Board Reporting Framework

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent has access to business files or tools, it may gather more internal data than the user intended while preparing the report.

Why it was flagged

The skill gives broad data-gathering guidance without specifying which files, systems, or connectors are allowed. This is aligned with board-report generation, but users should define the data scope.

Skill content
Tell your agent: "Prepare the Q1 board deck" or "Generate the monthly flash report for January" — it will pull your data and structure it using this framework.
Recommendation

Tell the agent exactly which source files, systems, date ranges, and metrics to use, and review the generated deck before sharing it.

What this means

Generated reports may expose confidential financial, customer, strategic, or regulatory information if shared too broadly or retained in an inappropriate workspace.

Why it was flagged

The reporting framework is designed to process and summarize confidential business metrics. There is no evidence of exfiltration or persistence, but the data placed into the agent context and outputs may be sensitive.

Skill content
KEY METRICS
  ARR: $X.XM ... Burn ... Cash ... Customers ... NRR ... Pipeline
Recommendation

Use only necessary data, redact sensitive customer or employee details where possible, and keep generated board materials in an access-controlled location.