DaoReview

This skill appears to do what it says (review documents and output a scored report) but it expects to run shell tools to extract text and will read files at paths you provide. Before installing or enabling it: 1) Confirm whether your agent runtime has pandoc, docx2txt, unzip, sed, and cat available — the SKILL.md references these but the skill metadata doesn't declare them. 2) Ensure the agent is sandboxed and will only process files you explicitly upload (prevent it from being given arbitrary system paths). 3) Prefer a version that declares required binaries or provide a wrapper that sanitizes/validates file paths and filenames to avoid path-injection. 4) Avoid uploading sensitive documents (PII, secrets) until you trust the runtime environment. If you need higher assurance, ask the publisher for source code or a manifest that declares required binaries and explains how inputs are constrained.