ops-orchestrate
Automates multi-project orchestration by auditing tasks, dispatching agents, and managing dependencies for efficient project execution.
Install this skill
Security score
The ops-orchestrate skill was audited on May 29, 2026 and we found 10 security issues across 4 threat categories, including 5 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 42 | 1. **Preferences**: `cat ${CLAUDE_PLUGIN_DATA_DIR:-$HOME/.claude/plugins/data/ops-ops-marketplace}/preferences.json` — read `owner`, `timezone`, `yolo_enabled`, registry path |
Template literal with variable interpolation in command context
| 43 | 2. **Daemon health**: `cat ${CLAUDE_PLUGIN_DATA_DIR}/daemon-health.json` — ensure all services healthy before dispatching |
Template literal with variable interpolation in command context
| 45 | 4. **Ops memories**: Check `${CLAUDE_PLUGIN_DATA_DIR}/memories/topics_active.md` for priority context |
Template literal with variable interpolation in command context
| 159 | ```bash |
Template literal with variable interpolation in command context
| 175 | ```bash |
Curl to non-GitHub URL
| 69 | | `curl -H "Authorization: Bearer $SENTRY_AUTH_TOKEN" "https://sentry.io/api/0/projects/<org>/<proj>/issues/?query=is:unresolved"` | API fallback | JSON array | |
Curl to non-GitHub URL
| 75 | | `curl -X POST https://api.linear.app/graphql -H "Authorization: $LINEAR_API_KEY" -H "Content-Type: application/json" -d '{"query":"{ issues(filter: {state: {type: {in: [\"started\",\"unstarted\"]}}} |
Access to .env file
| 470 | - **NEVER touch `.env`, credentials, or secrets files** — flag and skip |
External URL reference
| 69 | | `curl -H "Authorization: Bearer $SENTRY_AUTH_TOKEN" "https://sentry.io/api/0/projects/<org>/<proj>/issues/?query=is:unresolved"` | API fallback | JSON array | |
External URL reference
| 75 | | `curl -X POST https://api.linear.app/graphql -H "Authorization: $LINEAR_API_KEY" -H "Content-Type: application/json" -d '{"query":"{ issues(filter: {state: {type: {in: [\"started\",\"unstarted\"]}}} |