Creative Ops Copilot
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says: generate production-planning documents and, only when requested, create folders or push an invoice draft to a configured local invoicing API.
Before installing, be aware that this skill writes planning and invoice-draft files locally, can create a project folder skeleton, and can push an invoice draft to a configured invoicing API if you explicitly request it. Verify the output path and invoicing API configuration before using those optional features.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used, the skill may create or update an invoice draft in the user's local invoicing system.
The skill can trigger a write-like API action, but it is clearly disclosed as optional and requires an explicit user instruction.
POST the invoice draft to the local invoicing API (only if base URL is configured and Chris says “push it”).
Only use the invoice push option when you intend to create the draft, and confirm the configured API URL before using it.
A configured invoicing API key would grant the script whatever invoice-draft permissions that key has.
The script can use an optional API key from local configuration to authenticate to the invoicing API; this is expected for the stated invoicing integration and is not logged or sent elsewhere in the artifacts.
api_key = (api.get("apiKey") or "").strip()
if api_key:
req.add_header("Authorization", f"Bearer {api_key}")Use a narrowly scoped API key if the local invoicing system supports it, and avoid storing broader credentials in the config file.
Using the skeleton option will create folders and a README under the chosen output path.
The script can create a local project folder structure, which is disclosed and purpose-aligned but still modifies the local filesystem.
parser.add_argument("--skeleton", action="store_true", help="Create a project folder skeleton")Run the script from the intended project directory or pass a specific safe output path.