v1.0.0

GSD Headless (→ gsd-orchestrator)

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:25 AM.

Analysis

This appears to be a benign placeholder that redirects users to another skill; review that other skill separately before installing it.

GuidanceThis skill looks safe as a placeholder, but it is not the real orchestration tool. If you want the actual functionality, review `gsd-orchestrator` and any related `gsd`/`gsd-pi` dependency separately before installing.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

SKILL.md

Redirect — install `gsd-orchestrator` instead... requires: bins: [gsd] ... install: kind: node package: gsd-pi

The skill is explicitly a placeholder that points users to another skill and references related package metadata; this is disclosed and user-directed, but the referenced skill/package is outside this artifact's review.

User impactInstalling this placeholder does not provide the real orchestration behavior; choosing to follow the redirect means trusting and reviewing a different skill/package.

RecommendationBefore installing `gsd-orchestrator` or relying on `gsd-pi`, review those artifacts directly for their own permissions, commands, and data handling.