Og Board Individual

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can update task statuses and add blockers, artifacts, or worklogs on the board.

Why it was flagged

The skill documents direct use of tools that can change task-board state. This matches the skill purpose, but users should notice that installation enables task updates.

Skill content
opengoat_task_update_status({ ... "status": "todo|doing|blocked|pending|done" ... })
Recommendation

Use this skill only when you want the agent to manage task-board records, and verify task IDs and status changes before relying on them.

What this means

If the wrong actor ID is used, task updates could be attributed to the wrong agent or affect the wrong assignment context.

Why it was flagged

The task updates are attributed through an actorId. This is expected for a task-board workflow, but the correct agent identity matters.

Skill content
Replace `amazon-catalog-manager` with your agent id.
Recommendation

Confirm the agent ID and board permissions before allowing the skill to update tasks.