ClawHub

business-planner

v1.0.0

Auto-generate government startup business plans, infrastructure diagrams, and investor pitch decks with version-controlled iterative refinement and detailed...

⭐ 0· 530·2 current·2 all-time
by@mupengi-bot
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description (business plans, infra diagrams, pitch decks, iterative refinement) match the SKILL.md content. The features (HTML output, Mermaid diagrams, versioned HTML artifacts, slide guidance) are coherent with a 'business-planner' skill; no unrelated credentials, binaries, or services are requested.
ℹ
Instruction Scope
The SKILL.md explicitly references workspace-relative files (projects/gov-support/doyak-v10*.html, etc.), version-controlled outputs (v1→v12), and git-diff style tracking. That means the agent will need read/write access to the user's workspace and likely run git operations or otherwise manage files. The file-access expectation is reasonable for the stated functionality, but it is not explicitly declared in requires.config paths or as required binaries (e.g., git). There are no instructions to exfiltrate secrets or call external endpoints beyond citing public reports.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This is the lowest-risk install mechanism; nothing will be downloaded or written by an installer from external URLs.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. Its outputs and guidance (HTML, Mermaid, slides) do not require secrets. However, because it expects to read/write workspace files and produce versioned outputs, users should be aware it may access project files present in the agent workspace.
✓
Persistence & Privilege
always is false and disable-model-invocation is not set; the skill behaves like a normal, user-invoked instruction-only skill. It does not request permanent presence or attempt to modify other skills or system-wide settings in the SKILL.md.
Assessment
This skill is instruction-only and generally coherent with its description, but before installing: 1) Confirm you are comfortable with the agent reading and writing files in your workspace (the SKILL.md references project files and versioned HTML outputs). 2) Expect the agent may need local tooling (git, a browser or pandoc/LibreOffice/Google Slides conversion workflow) to perform diffs and convert HTML→PDF/Slides; these are not declared as required binaries. 3) Review any generated outputs and automated diffs before sharing externally — verify citations (McKinsey/Gartner/etc.) and ensure no sensitive data from your workspace is included in business plans or pitch decks. 4) If you do not want the agent to access certain files, restrict its workspace or remove those files before use. If you want higher assurance, ask the maintainer to explicitly declare required binaries (git, converters) and any file paths the skill will read/write.

Like a lobster shell, security has layers — review code before you run it.

latestvk9759eszzxv14et2qaat8y8p5s816k9q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments