KPI Tracker

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is a coherent local KPI tracker; it writes and reuses KPI JSON/report files, so users should keep business metrics in a controlled workspace.

This skill appears safe and purpose-aligned for local KPI tracking. Before installing, be aware that it can create and update kpi-config.json, kpi-data.json, and optional report files in your workspace; keep those files in an appropriate location if they contain sensitive business metrics.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create or update KPI data and report files in the workspace.

Why it was flagged

The skill gives the agent authority to modify a local data file. This is expected for a KPI tracker and is scoped to the workspace/custom KPI files, but users should notice that installation enables file changes when invoked.

Skill content
Read/write `kpi-data.json` for historical values
Recommendation

Use the skill in the intended project workspace, review important KPI entries before relying on reports, and keep backups if the data is business-critical.

What this means

Stored KPI history can influence later reports and may reveal business performance information to anyone with access to the workspace files.

Why it was flagged

The skill persists KPI history and later reuses it for trend analysis. This is core to the skill, but the stored business metrics may be sensitive and inaccurate entries could affect future reports.

Skill content
Store historical data in a simple JSON file for trend analysis
Recommendation

Store KPI files only in appropriate workspaces, avoid putting confidential metrics in shared locations unless intended, and verify the historical data before using it for decisions.