Og Board Individual

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for managing assigned task-board items, with expected ability to change task status and add task notes.

Before installing, confirm that you want the agent to read and update your assigned OpenGoat tasks. Make sure the agent ID is correct, and avoid putting secrets or sensitive information into blockers, artifacts, or worklogs.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can update task statuses and add blockers, artifacts, or worklogs on the board.

Why it was flagged

The skill documents direct use of tools that can change task-board state. This matches the skill purpose, but users should notice that installation enables task updates.

Skill content
opengoat_task_update_status({ ... "status": "todo|doing|blocked|pending|done" ... })
Recommendation

Use this skill only when you want the agent to manage task-board records, and verify task IDs and status changes before relying on them.

What this means

If the wrong actor ID is used, task updates could be attributed to the wrong agent or affect the wrong assignment context.

Why it was flagged

The task updates are attributed through an actorId. This is expected for a task-board workflow, but the correct agent identity matters.

Skill content
Replace `amazon-catalog-manager` with your agent id.
Recommendation

Confirm the agent ID and board permissions before allowing the skill to update tasks.