Decision Maker
v2.0.0决策分析工具。利弊对比、加权决策矩阵、盲选消除偏见、决策框架推荐、风险评估。Decision maker with pros-cons analysis, weighted matrix, blind choice, decision frameworks.
⭐ 0· 389·2 current·2 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md and scripts/decide.sh implement decision‑making features (analyze, pros‑cons, matrix, blind, framework, risk) which aligns with the skill name and description. However, scripts/script.sh is a developer workflow helper (init/build/test/deploy/etc.) that is not referenced in the SKILL.md and is not necessary for decision analysis — this is an extra artifact but not evidently malicious.
Instruction Scope
SKILL.md and scripts/decide.sh are narrowly scoped to producing templates, frameworks, and randomization for decisions. The runtime instructions do not request external data, credentials, or system files. One discrepancy: the package includes scripts/script.sh with commands for developer workflows which the SKILL.md does not document; that script also writes to a data directory, a behavior not described in SKILL.md.
Install Mechanism
No install spec is provided (instruction-only), and the repository only includes two shell scripts and docs. Nothing is downloaded or extracted at install time, so there is low install‑time risk.
Credentials
The skill declares no required environment variables or credentials. scripts/script.sh respects DECISION_MAKER_DIR and XDG_DATA_HOME/HOME for storage; this is reasonable but means the tool will create and write to ~/.local/share/decision-maker (or a directory you point it to). No secrets or unrelated credentials are requested.
Persistence & Privilege
always:false and no elevated privileges. The scripts create a per‑user data directory and log files (history.log, data.log) under the user's XDG_DATA_HOME or HOME; this is persistent but limited to the skill's own directory and does not modify system or other skills' configurations.
Assessment
This skill appears to do what it says: decision‑making helpers implemented in shell scripts, no network calls or credential requests. Before installing, consider: 1) Review the two scripts locally (decide.sh and script.sh) — script.sh contains unrelated developer commands; if you don't need them you can ignore or remove it. 2) Be aware the tool will create a data directory (defaults to ~/.local/share/decision-maker) and write logs; if you want to avoid that, set DECISION_MAKER_DIR to a location you control or inspect/clean the directory after use. 3) If you require stricter isolation, run the scripts in a sandbox or ephemeral environment. Overall there are no signs of credential exfiltration or network activity.Like a lobster shell, security has layers — review code before you run it.
latestvk977pyawq6x5s06fn5pdpgyr19833v15productivityvk973z2xehmjx22hbr0cw6a16c182sqqf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.