The Agent Skills Directory

[SAFE]: The skill is a legitimate business operations advisor tool designed to help scale companies through process design and OKR tracking.
[DATA_EXPOSURE_AND_EXFILTRATION]: The provided Python scripts (okr_tracker.py and ops_efficiency_analyzer.py) perform standard local file input/output operations. No network capabilities, hardcoded credentials, or exfiltration patterns to non-whitelisted domains were found.
[COMMAND_EXECUTION]: The skill documents the use of its own CLI scripts. There is no evidence of arbitrary shell command execution or user-input injection into system calls.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a standard attack surface for advisory agents as it is designed to ingest untrusted data from company-context.md and user-provided JSON files. However, it does not include high-risk capabilities like network access or privilege escalation that would make this surface critical.
[OBFUSCATION]: No encoding, zero-width characters, homoglyphs, or hidden text patterns were detected in the instructions, scripts, or reference documentation.

coo-advisor