Loto

Lockout-tagout procedure generator

Security Scan

The skill is internally consistent: a small, local CLI that stores lockout‑tagout entries under ~/.loto and does not request credentials or network access.

Purpose & Capability

Name/description match the behavior: the script implements add/list/search/remove/export/config operations for lockout‑tagout procedures and stores data in a local data directory. There are no unrelated permissions or external service credentials requested.

Instruction Scope

SKILL.md simply invokes the included scripts/script.sh commands. The script only reads/writes files under the configured DATA_DIR (default ~/.loto) and prints to stdout; it does not access network endpoints, other system config, or other credentials.

Install Mechanism

No install spec is provided (instruction-only skill with a bundled script). Nothing is downloaded or installed during runtime; the script runs locally.

Credentials

No environment variables or secrets are required. The only optional variable is LOTO_DIR (documented) which controls the local data directory—this is appropriate for the stated purpose.

Persistence & Privilege

always is false and the skill does not request elevated or persistent system privileges. It stores its own data under the user's home directory and does not modify other skills or global agent settings.

Assessment

This skill is a simple local CLI that stores JSONL entries under ~/.loto (or a directory you set via LOTO_DIR). Before installing, consider: 1) where you want procedure data stored—do not set LOTO_DIR to a sensitive system path; 2) the script writes and modifies files (data.jsonl, config.txt) in that directory—back up any important data before importing; 3) the included script is small and readable (no network calls or credential use), but if you obtain the skill from an untrusted source be aware that replacing the script could change behavior; review the script if you have security concerns. Finally, note the script uses simple text parsing for JSON fields and may not safely handle arbitrary embedded quotes/characters (data integrity issue, not a secret exfiltration risk).

Lockout-tagout procedure generator

Commands

status

scripts/script.sh status

Show current status

add

scripts/script.sh add

Add new entry

list

scripts/script.sh list

List all entries

search

scripts/script.sh search

Search entries

remove

scripts/script.sh remove

Remove entry by number

export

scripts/script.sh export

Export data to file

stats

scripts/script.sh stats

Show statistics

config

scripts/script.sh config

View or set config

help

scripts/script.sh help

version

scripts/script.sh version

Configuration

Use scripts/script.sh config <key> <value> to set preferences.

Variable	Required	Description
LOTO_DIR	No	Data directory (default: ~/.loto/)

Data Storage

All data stored in ~/.loto/ using JSONL format (one JSON object per line).

Output

Structured output to stdout. Exit code 0 on success, 1 on error.

---

Powered by BytesAgain | bytesagain.com | [e-mail]