operator-scorecard
Synthesizes weekly agent performance and community growth into a concise scorecard, answering if the week was productive.
Install this skill
Security score
The operator-scorecard skill was audited on May 30, 2026 and we found 14 security issues across 1 threat category, including 9 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 8 | > **${var}** — Optional. Pass `dry-run` to skip the notification (article + JSON spec still write). Pass an integer N to override the window (default 7 days = 168h). Empty = run normally on the 7-day |
Template literal with variable interpolation in command context
| 36 | - If `${var}` matches `^dry-run` → `MODE=dry-run`. Strip the prefix; remainder treated as window override. |
Template literal with variable interpolation in command context
| 103 | Path: `articles/operator-scorecard-${today}.md`. Overwrite if exists (idempotent same-day reruns). |
Template literal with variable interpolation in command context
| 105 | The `${health_paragraph}` placeholder in the template below resolves per branch from step 2d: |
Template literal with variable interpolation in command context
| 107 | - **Branch A — skill-analytics present:** `The fleet ran ${total_runs} times across ${distinct_skills} skills with a ${success_pct}% success rate. ${anomaly_count} anomaly flag(s) raised this week. He |
Template literal with variable interpolation in command context
| 108 | - **Branch B — heartbeat-only:** `Heartbeat issued ${heartbeat_ok} clean reports and ${heartbeat_p0+p1+p2+p3} flagged reports across ${heartbeat_total} runs in the window (P0=${heartbeat_p0} P1=${hear |
Template literal with variable interpolation in command context
| 111 | ```markdown |
Template literal with variable interpolation in command context
| 159 | ```json |
Template literal with variable interpolation in command context
| 216 | ``` |
Template literal with variable interpolation in command context
| 235 | - **Branch A:** `${success_pct}% across ${total_runs} runs (${anomaly_count} anomalies, ${heartbeat_ok} clean heartbeats)` |
Template literal with variable interpolation in command context
| 236 | - **Branch B:** `${heartbeat_ok} clean / ${heartbeat_p0+p1+p2+p3} flagged heartbeats across ${heartbeat_total} runs (skill-analytics not enabled)` |
Template literal with variable interpolation in command context
| 241 | ### 9. Log to `memory/logs/${today}.md` |
Template literal with variable interpolation in command context
| 243 | ``` |
Template literal with variable interpolation in command context
| 248 | - **Agent health**: ${health_log_line} (Branch A: `${success_pct}% success across ${total_runs} runs · ${anomaly_count} anomalies · ${heartbeat_p0+p1} flagged heartbeats · ${open_issues} open issues` |