requirement-review-simulator

What to check before you install/use this skill: - Review the SKILL.md and the three reference files (scoring-engine-deterministic.md, review-playbook.md, report-template-pro.html) yourself — they are the runtime rules; look for any hidden or unexpected instructions, unusual markup, or invisible control characters. The scanner flagged 'unicode-control-chars' in SKILL.md; this often indicates accidental copy/paste but can also be used to hide text or alter prompt parsing. - The skill uses only local files and templates and does not request credentials or install code, which lowers risk. Nevertheless, avoid pasting highly sensitive proprietary PRD content until you are comfortable with where generated HTML reports are stored or transmitted by your agent environment. - Confirm the source: claw.json points to a GitHub account, but the top-level metadata listed 'Source: unknown' and homepage was 'none' in the registry summary. If you rely on this skill for sensitive work, prefer skills with a verifiable homepage/repo or inspect the repository yourself. - Run first uses in a sandbox or with non-sensitive example PRDs to validate outputs and ensure there are no unexpected external network calls or telemetry in your agent runtime. If you want, I can (1) show the exact lines of SKILL.md around the detected control characters, or (2) produce a checklist to help you manually review the included reference files for anything suspicious.