Business Analyst
v1.0.0Professional Business Analyst career roadmap platform that generates personalized learning paths for IT, Data, and Finance specializations.
⭐ 0· 55·0 current·0 all-time
byToolWeb@krishnakumarmahadevan-cmd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Business Analyst roadmap generator) match the SKILL.md and openapi.json which describe roadmap-generation endpoints and schemas. The skill requests no binaries, env vars, or installs — appropriate for a lightweight API-integration/instruction-only skill.
Instruction Scope
SKILL.md contains API endpoint descriptions, example requests/responses, and an OpenAPI schema. It does not instruct the agent to read local files, access unrelated env vars, or exfiltrate data. However, the skill does not include a base URL, authentication mechanism, or hosting details — that omission means the runtime needs a target endpoint to call (or the description is purely illustrative).
Install Mechanism
No install spec and no code files are provided, so nothing is written to disk or executed by an installer. This is the lowest-risk install posture for a skill.
Credentials
The skill declares no required environment variables or credentials. That is proportionate to the described functionality. Note: if a real deployment requires authentication, the current skill lacks that detail (not a direct security red flag, but an operational gap).
Persistence & Privilege
The skill does not request persistent presence (always is false) and does not indicate modification of other skills or system configuration. Autonomous invocation (disable-model-invocation=false) is platform-default and expected for an invocable skill.
Assessment
This skill is internally consistent and low-risk because it only provides API documentation and examples and requests no installs or credentials. Before installing or using it, confirm: (1) what concrete API endpoint and host the agent will call (SKILL.md lacks a base URL); (2) whether the real service requires authentication and where those credentials would be stored; (3) how the service handles personal data you send (assessmentData can include PII); and (4) that you trust the provider or have reviewed their privacy/security policy. If you plan to send sensitive data, require authenticated endpoints and a clear data-retention/privacy agreement first.Like a lobster shell, security has layers — review code before you run it.
latestvk97fx56ajxypg2jk1nyzkx5xj983rvyv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.