ClawHub

SRE Roadmap

v1.0.0

Professional entry-level SRE career roadmap platform that generates personalized learning paths based on skills assessment and career goals.

⭐ 0· 49·0 current·0 all-time
byToolWeb@krishnakumarmahadevan-cmd
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included OpenAPI spec and SKILL.md. The declared functionality (generate a personalized SRE roadmap) aligns with the request/response shapes and endpoints in openapi.json. No unrelated binaries, env vars, or config paths are requested.
ℹ
Instruction Scope
SKILL.md contains sample requests/responses and an OpenAPI endpoint set for POST /api/sre/roadmap and health checks; it does not instruct the agent to read local files or arbitrary environment variables. One minor gap: openapi.json does not declare a server/base URL and SKILL.md does not state where requests are sent (no homepage or host), so you should confirm the destination of any network calls before sending personal data.
✓
Install Mechanism
No install spec or code files that would be written to disk; skill is instruction-only, which minimizes install-time risk.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The API schema accepts session/user IDs and assessment data (user-provided), which is expected for a roadmap generator; there are no unexplained secret requests.
✓
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed. This is standard for skills and is proportionate given the functionality. The skill does not request persistent system-wide privileges.
Assessment
This skill appears coherent and low-risk from the bundle contents: it defines an API to generate SRE roadmaps and requests no secrets. Before installing or sending real user data, confirm (1) where the API calls will be sent (base URL / host) and who operates that service, (2) the privacy/data-retention policy for assessment data (sessionId/userId may be identifying), and (3) pricing/usage limits. If provenance or a homepage/repository is unavailable, treat the service as unvetted and avoid sending sensitive or personally identifiable information.

Like a lobster shell, security has layers — review code before you run it.

latestvk976r6agc54sst8pmk6jfvg4xn83r1c4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments