Agile Toolkit
v1.0.0Provides practical coaching on Agile ceremonies, story writing, estimation, metrics, and continuous improvement using Scrum, Kanban, SAFe, and Management 3.0...
⭐ 0· 1.3k·5 current·5 all-time
byOliver Monneke@olivermonneke
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, README, and SKILL.md all describe Agile coaching (retros, planning, user stories, standups, metrics). The skill requires no binaries, env vars, or config paths — which is proportionate for a text-only coaching assistant.
Instruction Scope
SKILL.md contains detailed facilitation scripts, templates, question prompts, and calculation guidance. It does not instruct the agent to read files, access system state, call external endpoints, or collect unrelated data. The instructions stay within the domain of Agile coaching and facilitation.
Install Mechanism
There is no install specification and no code files — the skill is instruction-only, so nothing is written to disk or downloaded. This is the lowest-risk installation profile.
Credentials
The skill declares no required environment variables, credentials, or config paths. There is no apparent need for secrets or external service access for the described functionality.
Persistence & Privilege
always:false and default autonomous invocation are used. The skill does not request permanent presence or access to other skills' configurations. Autonomous invocation is normal; there is no 'always:true' privilege escalation or other persistence asked for.
Assessment
This skill is instruction-only and appears coherent with its Agile coaching purpose: it doesn't request credentials, perform installs, or reference system files. Before installing, consider: (1) the publisher identity is minimal (no homepage or author verification) — if provenance matters for your org, verify the author externally; (2) any sensitive project details you paste into the chat will be included in responses and could be stored by the agent platform — avoid pasting secrets; (3) the skill can be invoked autonomously by the agent (normal default) — if you want tighter control, disable autonomous invocation in agent settings. Other than those operational/privacy considerations, there are no technical red flags.Like a lobster shell, security has layers — review code before you run it.
latestvk973chywrcvpd0cerqraw2kjj1810zwy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
