work-order-builder
work-order-builder is an Agent task delegation & fan-out skill for AI agents, published by camoa in the claude-skills repository on GitHub. Skillspace rates work-order-builder F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.
Unsafe. This skill has patterns associated with malicious or dangerous behaviour. We do not recommend running it.
Use when an orchestrator must build exactly ONE contract-conformant work-order in clean context — gates it through wo-compile.sh assert-dispatchable (fail-closed; never spawn on a non-zero gate), checkpoints the shared code worktree, spawns one fresh standard Task-tool subagent whose prompt is the self-contained work-order body, treats the collected transcript as untrusted data, commits the worktree only if it shows changes, and returns the disk-derived collect-handle JSON. A per-work-order atom: no loop, no verdict, no /review; read-only on the work-order BODY, and its ONLY status write is the `ready→in_progress` flip (after its re-gate, before it commits — the crash-safety hinge). Invoked per-WO by the lifecycle_controls loop; runs in the orchestrator's main context (its single Task spawn is the one supported depth-1 level).
- Grade
- F
- Quality
- 15 / 100
- Safety
- Unsafe
- GitHub stars
- 32
Unproven: rated by static analysis only, not yet compared head-to-head.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 96 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- Critical-risk patterns
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- destructive rm -rf on home/root
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.