Incident Triage Helper
PassAudited by ClawScan on May 10, 2026.
Overview
This appears to be a simple local package validation and archiving helper, though its registry name/version do not match the skill file contents.
This package looks safe to review locally, but confirm the name/version mismatch before installing or publishing it, and only run the included shell scripts after inspecting them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user expecting an incident triage assistant may instead get a local package review and publishing helper.
The skill file identifies the package as a local skill-package publisher at version 0.2.0, while the registry metadata presents it as incident-triage-helper version 0.4.0. This mismatch could confuse users about what they are installing.
name: local-skill-package-publisher version: 0.2.0 description: Complete local skill package to assess and potentially publish.
Verify that the registry name, slug, version, and SKILL.md metadata are intentionally aligned before relying on or publishing the package.
Running the quick-start commands executes local shell scripts and creates a local archive file.
The package asks the user to run local shell scripts. The provided scripts are simple and scoped: validate.sh checks expected files and metadata, while package.sh creates a tar archive under dist.
./scripts/validate.sh ./scripts/package.sh
Inspect the included scripts and run them from the package directory only if the metadata mismatch is acceptable.