Ops Dashboard
Analysis
This skill appears to be a straightforward local ops-reporting tool that reads workspace and git metadata without network access, persistence, credential use, or destructive actions.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
subprocess.run(["git", "-C", str(workspace), "status", "-sb"], capture_output=True, text=True, check=True)
The skill runs local git commands against a user-selected workspace. This is expected for its git-status purpose and uses argument lists rather than shell execution, but it is still local tool invocation that users should understand.
