Ceo Advisor 2
v1.0.0Executive leadership guidance for strategic decision-making, organizational development, and stakeholder management. Use when planning strategy, preparing bo...
⭐ 1· 81·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (CEO strategic guidance) aligns with the provided content: leadership references, frameworks, and two analysis scripts that model strategy and financial scenarios. One minor mismatch: SKILL.md's Quick Start instructs running 'python ...' but the manifest declares no required binaries — the skill implicitly requires a Python runtime but does not list it as a required binary.
Instruction Scope
SKILL.md stays within CEO/advice scope and references local reference docs included in the package. It uses language like 'Surface these without being asked when you detect them in company context' which is somewhat open-ended (could encourage the agent to scan any user-provided company context) but no instructions tell the agent to read system files, environment variables, or send data outside. The referenced folders 'culture-architect/' and 'board-deck-builder/' are mentioned but not present in the manifest, which is a gap in documentation/assets rather than a security issue.
Install Mechanism
No install spec is provided (instruction-only with included scripts). That minimizes installation risk. There are no download URLs, package managers, or archive extracts. The only operational requirement is executing the included Python scripts.
Credentials
The skill declares no required env vars, no primary credential, and no config paths. The code shown performs local computation only (math/json/datetime) and does not import networking libraries or access OS secrets. The lack of credential requests is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not instruct modifying other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill appears to be what it says: a CEO/advisory toolkit with local Python analyzers and markdown reference guides. Before installing or running: (1) ensure you have a Python runtime available (the manifest doesn't list Python as a required binary but SKILL.md runs python scripts); (2) review the two included scripts yourself (they appear to perform only local financial and strategic calculations and do not perform network calls), especially if you plan to run them on sensitive production data; (3) note that SKILL.md uses open-ended language about detecting issues in 'company context' — decide what input the agent may examine (user-provided documents vs. system files) and avoid granting it access to secrets or systems you don't want scanned; (4) if you require stricter isolation, run the scripts in a sandboxed environment or with network disabled. Overall there are no signs of credential requests, hidden endpoints, or installer downloads.Like a lobster shell, security has layers — review code before you run it.
latestvk97c3gqh3bjmbe144xjd2aewa983ddft
License
MIT-0
Free to use, modify, and redistribute. No attribution required.