Decision Ledger

PassAudited by ClawScan on May 1, 2026.

Overview

Decision Ledger appears to be a benign local text-structuring skill for turning meeting or project material into a reviewable decision ledger.

This skill is suitable for organizing meeting notes or project materials into a decision ledger. Before installing, note that it can run a local Python script on files you select, so avoid pointing it at unrelated private directories and review outputs before using them for governance, legal, or external publication decisions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If run, the helper processes local files selected through command arguments and may create or overwrite an output file.

Why it was flagged

The skill explicitly documents running a local Python helper. This is aligned with the purpose, but users should notice that it can read the chosen input path and write the chosen output path.

Skill content
如运行环境允许 shell / exec,可使用:`python3 "{baseDir}/scripts/run.py" --input <输入文件> --output <输出文件>`
Recommendation

Run it only on intended meeting/project files, choose a safe output path, and prefer stdout or dry-run behavior when handling sensitive material.

What this means

Users have less external provenance to rely on when deciding whether to trust the bundled local script.

Why it was flagged

The skill has weak provenance information, although the provided artifacts show no remote installer, package download, or third-party dependency.

Skill content
Source: unknown; Homepage: https://example.invalid/skills/decision-ledger
Recommendation

Review the included files before use and install only from a registry or owner you trust.