GSD Pi (→ gsd-orchestrator)

PassAudited by ClawScan on May 1, 2026.

Overview

This is a transparent placeholder skill that only redirects users to install gsd-orchestrator, with a minor supply-chain note to review the redirected skill first.

This placeholder itself does not contain executable code or sensitive access. If you choose to follow the redirect, review gsd-orchestrator separately because that is the skill that may contain the actual orchestration behavior and permissions.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the redirected skill may grant capabilities not present in this placeholder.

Why it was flagged

The skill redirects installation to a separate skill, so the meaningful security review should be applied to that target before the user installs it.

Skill content

Install [`gsd-orchestrator`](https://clawhub.com/skills/gsd-orchestrator) instead. ... `clawhub install gsd-orchestrator`

Recommendation

Review the gsd-orchestrator skill’s permissions, install mechanism, and artifacts before installing it.