Decision Advisor
v1.0.0Decision-making advisor using Tree of Thoughts for exploring options, analyzing trade-offs, and providing data-driven recommendations.
⭐ 0· 32·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Tree of Thoughts decision advisor) match the implementation: index.js implements option generation, criteria definition, scoring, and recommendation logic. There are no unexpected dependencies, environment variables, or external services declared.
Instruction Scope
SKILL.md describes the decision workflow and shows JS usage that matches index.js. The runtime instructions and code only use the provided LLM interface and do not instruct reading system files, env vars, or posting to external endpoints.
Install Mechanism
There is no install spec (instruction-only skill) and package.json is simple; nothing is downloaded or extracted. No high-risk install mechanism is present.
Credentials
The skill declares no required environment variables or credentials. The only external interaction is via this.llm.generate — the host must supply an LLM implementation and any associated credentials; the skill itself does not request secrets.
Persistence & Privilege
always is false and the skill does not modify other skills or system settings. It does not request permanent presence or elevated privileges.
Assessment
This skill appears coherent and light-weight. Two practical things to consider before installing: (1) It expects the host to provide an LLM implementation (this.llm.generate). The included default LLM simply returns '5' so you should supply a real LLM client (and the credentials that client requires) to get useful results. (2) Any sensitive context you pass into advise(...) may be sent to whatever LLM provider you configure — the skill itself doesn't store or exfiltrate secrets, but your configured LLM/provider could. Also note the code parses LLM text with simple regexes, so malformed LLM responses can lead to fallback/default behavior (not a security issue but can affect accuracy).Like a lobster shell, security has layers — review code before you run it.
latestvk97crng2x4dmmgr6r1nq3nhfjx842v16
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
