Product Owner
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only Product Owner skill is coherent and purpose-aligned, but it keeps product and backlog notes locally so users should be mindful of what business information they store.
This appears safe to install as an instruction-only product-owner assistant. Before using it with confidential roadmap, stakeholder, or sprint information, understand that it is designed to keep local memory in ~/product-owner/ and may reuse that context in later sessions.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Future sessions may reuse stored product assumptions, and anyone with access to the local files could read backlog, stakeholder, or sprint information.
The skill deliberately persists product context, backlog details, and sprint history for reuse across sessions. This supports the skill's purpose and is disclosed as local-only, but the stored content may include sensitive business or planning information.
All data is stored locally in `~/product-owner/`: `memory.md` | Product name, team context, priorities; `backlog/{product}.md` | Stories as they develop; `sprints/` | Sprint historyOnly store product details you are comfortable keeping locally; periodically review or delete files in ~/product-owner/ if priorities, stakeholders, or confidentiality needs change.