Incident Triage Helper

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user expecting an incident triage assistant may instead get a local package review and publishing helper.

Why it was flagged

The skill file identifies the package as a local skill-package publisher at version 0.2.0, while the registry metadata presents it as incident-triage-helper version 0.4.0. This mismatch could confuse users about what they are installing.

Skill content
name: local-skill-package-publisher
version: 0.2.0
description: Complete local skill package to assess and potentially publish.
Recommendation

Verify that the registry name, slug, version, and SKILL.md metadata are intentionally aligned before relying on or publishing the package.

What this means

Running the quick-start commands executes local shell scripts and creates a local archive file.

Why it was flagged

The package asks the user to run local shell scripts. The provided scripts are simple and scoped: validate.sh checks expected files and metadata, while package.sh creates a tar archive under dist.

Skill content
./scripts/validate.sh
./scripts/package.sh
Recommendation

Inspect the included scripts and run them from the package directory only if the metadata mismatch is acceptable.