operator-scorecard
Synthesizes weekly agent performance and community growth into a concise scorecard, answering if the week was productive.
Install this skill
Security score
The operator-scorecard skill was audited on Jun 15, 2026 and we found 8 security issues across 1 threat category, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 8 | > **${var}** — Optional. Pass `dry-run` to skip the notification (article + JSON spec still write). Pass an integer N to override the window (default 7 days = 168h). Empty = run normally on the 7-day |
Template literal with variable interpolation in command context
| 36 | - If `${var}` matches `^dry-run` → `MODE=dry-run`. Strip the prefix; remainder treated as window override. |
Template literal with variable interpolation in command context
| 94 | Path: `articles/operator-scorecard-${today}.md`. Overwrite if exists (idempotent same-day reruns). |
Template literal with variable interpolation in command context
| 96 | ```markdown |
Template literal with variable interpolation in command context
| 144 | ```json |
Template literal with variable interpolation in command context
| 201 | ``` |
Template literal with variable interpolation in command context
| 221 | ### 9. Log to `memory/logs/${today}.md` |
Template literal with variable interpolation in command context
| 223 | ``` |