Roadmap
v2.0.0Roadmap - command-line tool for everyday use Use when you need roadmap.
⭐ 0· 255·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (roadmap CLI) align with the included script: it manages roadmap entries, timelines, exports, and status, storing data under the user's home directory. The skill does not request unrelated credentials or binaries.
Instruction Scope
SKILL.md describes commands and claims you can set ROADMAP_DIR to change the data directory. The shipped script, however, unconditionally uses DATA_DIR="${HOME}/.local/share/roadmap" and does not read ROADMAP_DIR. Also the SKILL.md command table is a subset of the script's actual subcommands. These are coherence/accuracy issues (functionality mismatch), not signs of exfiltration.
Install Mechanism
There is no install spec or third‑party download. This is an instruction-only skill with a single local bash script, so nothing is pulled from the network or written to system locations beyond the user's home directory during normal use.
Credentials
The skill declares no required environment variables or credentials. SKILL.md suggests ROADMAP_DIR can override the data directory, but the script does not honor that variable; the script implicitly relies on HOME. No sensitive secrets or external tokens are requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It creates and writes files only under ~/.local/share/roadmap (user-owned data), which is a normal level of persistence for a CLI tool.
Assessment
This skill appears locally scoped and implements a roadmap CLI that stores data in ~/.local/share/roadmap and does not contact external services or request credentials. Before installing/using: 1) Note that SKILL.md mentions ROADMAP_DIR but the bundled script ignores it—if you expect to change the data location either export HOME appropriately or edit the script to honor ROADMAP_DIR. 2) The tool writes plain text logs under your home directory; don't store secrets there and check permissions if you have privacy concerns. 3) Exports (JSON) are built manually and may not escape special characters correctly—review exported files if you rely on them. 4) If you want networked backups or integrations, those are not present and would require inspecting/modifying the script. Overall this is coherent for its stated purpose, but review and/or patch the ROADMAP_DIR behavior if you need configurable storage.Like a lobster shell, security has layers — review code before you run it.
latestvk97a4kkk8qdt8ay4s4xde6pgh5833k3q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.