Okr Planner
PassAudited by ClawScan on May 10, 2026.
Overview
The skill is mostly a local OKR prompt/template helper, with the main caveat that it also includes a lightly documented local task-manager script that can store user-entered data.
This appears safe to install for OKR planning, but be aware that one bundled script is a generic local task manager and can save entered information under ~/.local/share/okr-planner or a configured OKR_PLANNER_DIR. Do not enter sensitive company goals unless that local storage is acceptable.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may not be able to tell from the metadata which bundled script would actually run, although no unsafe installer or remote code source is shown.
The package contains runnable scripts even though the install metadata does not explain how they are installed or bound to the documented okr-planner command.
No install spec — this is an instruction-only skill. Code file presence: 2 code file(s): scripts/okr.sh; scripts/script.sh
Before relying on the CLI command, confirm which script is invoked and prefer explicit installation metadata in future releases.
If this script is the command that runs, the behavior may be confusing or broader than the OKR-only description suggests.
This bundled script presents itself as a generic productivity/task-management tool, while SKILL.md advertises OKR-specific commands such as create, review, align, score, template, and cascade.
# okr-planner - Productivity and task management tool
Treat the extra task-management CLI as separate local functionality and verify the intended command before using it for important OKR data.
OKRs, task names, or other business details entered through this script may remain on disk and be shown later via list/export behavior.
The script creates a local data directory and stores user-entered items plus command history, which is persistent local state.
DATA_DIR="${OKR_PLANNER_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/okr-planner}"; DB="$DATA_DIR/data.log"; _log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }Avoid entering sensitive business information unless local persistence is acceptable, or set OKR_PLANNER_DIR to a controlled location and delete the directory when no longer needed.