Project Management System

• Verdict: Pass
• Confidence: Medium
• Analyzed: Mar 30, 2026, 4:41 PM
• Findings: 0
• Version: 1.6.1

Overview

The skill's files and runtime instructions are coherent with a project-management system and do not request unrelated credentials or installers, but the bundled tooling (tools/*.py) should be reviewed before allowing runtime execution.

This package appears coherent for project-management: no unexpected credentials or third-party installers are required. However, before installing or enabling autonomous invocation, do the following: 1) Inspect the two bundled Python scripts (tools/dashboard.py and tools/system-check.py) to confirm they do not perform unexpected network calls, exfiltrate data, or run destructive system commands; 2) If you plan to let the skill write or execute code, run it in a restricted/sandboxed environment and ensure it cannot access sensitive host paths; 3) Confirm any automatic git/commit behavior is acceptable — governance docs reference committing snapshots; verify the scripts won't commit secrets; 4) If you cannot review the code yourself, do not enable autonomous invocation or permit the skill to run tools that modify system files. If you want, provide the contents of tools/dashboard.py and tools/system-check.py and I will analyze them for risky behavior.