Skip to content
← Registry
Trust Report

executing-plan

Use to execute an implementation plan with automatic sequential/parallel orchestration - handles worktree verification, resume detection, phase dispatch, and quality verification

90
SUSPICIOUS
Format: openclawScanner: v0.8.1Duration: 26msScanned: 2mo ago · Jul 25, 3:48 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 90AgentVerus SUSPICIOUS 90AgentVerus SUSPICIOUS 90
[![AgentVerus](https://agentverus.ai/api/v1/skill/d98a90ef-7136-4be1-81a4-ec5b7b3ceac6/badge)](https://agentverus.ai/skill/d98a90ef-7136-4be1-81a4-ec5b7b3ceac6)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/d98a90ef-7136-4be1-81a4-ec5b7b3ceac6/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"d98a90ef-7136-4be1-81a4-ec5b7b3ceac6","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/d98a90ef-7136-4be1-81a4-ec5b7b3ceac6/trust

Category Scores

72
Permissions
100
Injection
84
Dependencies
87
Behavioral
95
Content
100
Code Safety

Findings (9)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: exec

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: create the workspace

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred package bootstrap is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: package.json

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumExternal documentation dependency-8

The skill relies on external documentation, specs, or README content as part of its workflow, which introduces an additional remote dependency and trust boundary.

README.md

→ Review which external services or providers the skill depends on, what data crosses that boundary, and whether the dependency is necessary for the intended workflow.

dependenciesASST-04
mediumPackage-managed project bootstrap dependency-8

The skill bootstraps a package-managed project structure, which adds supply-chain exposure through manifest files, build configuration, and package-manager workflows.

package.json

→ Review which external services or providers the skill depends on, what data crosses that boundary, and whether the dependency is necessary for the intended workflow.

dependenciesASST-04
mediumConfig tamper core detected (inside code block)-8

Found config tamper core pattern: "Add to CLAUDE.md"

Add to CLAUDE.md or constitution/testing.md for automated quality gates.

→ Do not instruct users to write, edit, or otherwise modify trust-boundary workspace files like AGENTS.md, TOOLS.md, or CLAUDE.md. Treat them as user-owned policy/configuration and keep the skill self-contained.

behavioralASST-03
mediumEnvironment secret piping detected (inside code block)-5

Found environment secret piping pattern: "echo "$PLAN_PATH" |"

DIR_NAME=$(echo "$PLAN_PATH" | sed 's|^.*specs/||; s|/plan.md$||')

→ Treat shell pipelines that pass secrets from environment variables as sensitive credential handling. Avoid exposing secret values to command histories or subprocess pipelines unless absolutely necessary.

behavioralASST-05
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

→ Keep these safety boundaries. They improve trust.

contentASST-09
infoError handling instructions present

The skill includes error handling instructions for graceful failure.

Error handling patterns detected

→ Keep these error handling instructions.

contentASST-09