organization-operating-skill

• Risk level: Low
• Analyzed: Mar 31, 2026, 8:18 AM
• Findings: 0
• Version: 1.0.1

Overview

The skill's code, instructions, and requested environment are coherent with an organization-platform CLI: it accesses ZingUp/Groupoo APIs, stores session files locally, and does not request unrelated credentials or perform unexplained network calls.

This skill appears to do what it says: a CLI to call ZingUp/Groupoo APIs. Before running it, review the bundled script and take these precautions: 1) Prefer passing --session-file explicitly or set ORG_SKILL_STATE_DIR to control where session tokens are written (default: ~/.organization-operating-skill/sessions). 2) Be careful with the default environment — it defaults to production; use --env test or --base-url when developing. 3) Inspect any saved session files for tokens and delete them when no longer needed. 4) If you need stricter isolation, run the CLI in a sandboxed account or container so saved tokens and state cannot affect other local sessions.