GOG Sales Analytics
ReviewAudited by ClawScan on May 12, 2026.
Overview
The skill looks like a plausible GOG integration, but it references account-credential use and a weekly cron auto-run helper that is not included in the reviewed files.
Review before installing. Do not run the weekly cron setup or provide GOG credentials unless the missing script is supplied from a trusted source, its behavior is understood, and you are comfortable with scheduled account-related activity.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user or agent could try to run a helper script whose contents were not supplied for inspection.
The provided artifact set contains only SKILL.md and _meta.json, so this referenced executable helper is absent from review. Running it would depend on unreviewed external or local code.
The `gog-sales-analytics` project includes `scripts/weekly_run.sh` for cron-based Monday auto-run:
Do not run the weekly_run.sh commands unless the script is included from a trusted source and reviewed; the package should include or remove the referenced helper.
If installed, the skill-related workflow could run weekly without a fresh prompt and potentially use account data or make changes depending on the missing script.
This command is explicitly for installing recurring cron execution, which can continue operating after the immediate user task; the reviewed artifacts do not bound the job's behavior.
./scripts/weekly_run.sh --install # add Monday 08:00 cron
Only install scheduled execution after explicit user approval, after reviewing the script, and verify that the uninstall command removes the cron entry.
Using library-management features may require giving the agent access to a GOG account.
GOG credentials are purpose-aligned for managing a GOG library, but the registry metadata declares no primary credential or required environment variable, and the auth method/scope is not described.
- Requires GOG account credentials for library management
Use only official, least-privilege authentication methods where possible and avoid providing credentials until the workflow and storage/handling are clear.