Agile Observer

This skill appears to genuinely implement Trello/Jira metrics, but it expects to read credentials from workspace secrets (trello-credentials.json or jira-credentials.json) even though the registry lists no required credentials. Before installing: - Verify where and how the agent will access credentials. If you must provide credentials, prefer limited-scope API tokens (not full admin credentials) and rotate them after testing. - Confirm that workspace secrets access is acceptable — the skill will look for credential files in the workspace secret store. If you don't want the agent to access your primary credentials, create a dedicated read-only account or token for metrics only. - Ask the skill author (or inspect runtime logs) to confirm that reports and data are only sent to Trello/Jira and your chosen delivery channel — clarify what "primary channel" means and where reports will be posted. - Because metadata omitted the credential requirement, consider exercising extra caution: run the skill in a controlled environment first, audit network requests, and review any generated outputs before enabling recurring scheduling. If the author updates the registry metadata to declare the required credentials explicitly (or documents an option to provide credentials via the platform's secure credential fields), my confidence that this is coherent would increase.