中文 EN

Scan Report

Scan New Files

✓ Trusted — Risk Score 10/100
Last scan:18 hr ago Rescan
10 /100
month-end-close
Orchestrate and validate the full month-end close for a QBO client
Documentation-only skill with no implementation code present; all described functionality references a non-existent script.
Skill Namemonth-end-close
Duration28.6s
Enginepi
✓
Safe to install
This skill requires actual implementation files (scripts/pipelines/month-end-close.py) before it can be functional. Add allowed-tools declaration and dependencies file (requirements.txt) for complete documentation.

Findings 2 items

Severity Finding Location
Low
Referenced script does not exist Doc Mismatch
SKILL.md declares script location as scripts/pipelines/month-end-close.py but this file does not exist in the repository
scripts/pipelines/month-end-close.py
→ Add the implementation script or update SKILL.md to remove this reference
 SKILL.md:21
Low
Missing allowed-tools declaration Doc Mismatch
Skill metadata lacks allowed-tools declaration which is required for proper capability mapping
No allowed-tools in frontmatter
→ Add allowed-tools declaration to frontmatter (e.g., allowed-tools: Read, Bash)
 SKILL.md:1
ResourceDeclaredInferredStatusEvidence
Filesystem UNKNOWN NONE ✓ Aligned No code present to infer
Network UNKNOWN NONE ✓ Aligned No code present to infer
Shell UNKNOWN NONE ✓ Aligned No code present to infer
Environment UNKNOWN NONE ✓ Aligned No code present to infer

File Tree

1 files · 8.1 KB · 225 lines
Markdown 1f · 225L
└─ 📝 SKILL.md Markdown 225L · 8.1 KB

Security Positives

✓ No malicious code present - only documentation exists
✓ No credential theft mechanisms detected
✓ No data exfiltration endpoints observed
✓ No obfuscation or base64-encoded payloads
✓ No suspicious network communications
✓ Documentation describes legitimate financial operations with clear scope