ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      h-mascot

      Safety Report

      Geordi

      @h-mascot

      Use when turning a coding goal or PRD into bounded build missions, running those missions with Codex or Droid, verifying outcomes separately, and preserving...

      81Downloads
      0Installs
      0Stars
      4Versions
      Design & Prototyping2,478

      Security Analysis

      high confidence
      Suspicious0.16 risk

      Geordi is a coherent coding-agent mission runner, but its installer and runtime authority need careful review because it installs a PATH command, relies on remote GitHub code, and the reviewed package is missing the CLI executable it claims to install.

      Jun 3, 202613 files5 concerns
      Purpose & Capabilitynote

      The stated purpose fits most capabilities: it structures coding missions, loads repo context, runs Codex or Droid, verifies with commands, and stores receipts. The high-impact part is expected for this purpose but still powerful because default examples use automated Codex/Droid execution against a local repository.

      Instruction Scopenote

      The docs emphasize bounded missions, acceptance commands, reviewing git status, avoiding secrets, and not using the tool for private data entry. The helper scripts also read project context and some home-directory context files, which is only partly surfaced in the high-level documentation.

      Install Mechanismconcern

      The README and SKILL.md recommend curl-to-bash or cloning from GitHub, and install.sh can fetch a GitHub tarball and install a wrapper under ~/.local/bin. In the reviewed artifact, scripts/geordi is absent even though install.sh chmods and wraps it, creating a provenance and functionality mismatch between the package under review and the code users may actually install.

      Credentialsnote

      Reading repo instructions, PRDs, package metadata, git history, and running acceptance commands is proportionate for a coding mission runner. Users should treat it as a tool with broad local repo authority, especially when Codex or Droid are run in automated modes.

      Persistence & Privilegenote

      Persistence is mostly disclosed: ~/.geordi, ~/.local/bin/geordi, and .geordi/state logs. The update helper can also create or modify CONTEXT.md or matching files under ~/clawd/memory, which is purpose-aligned but should be understood before use.

      Guidance

      Install only after reviewing the GitHub source or using a pinned, inspected checkout. Be aware that Geordi is intended to read local project context, run Codex or Droid, execute verification commands, and write logs/state. Do not use it in repositories containing secrets or sensitive private data unless you are comfortable with that context being included in agent prompts and receipts.

      Latest Release

      v1.0.603

      Synced from SuperAda.ai resources

      Popular Skills

      妙达语音转文字

      @nice1234-h · 1 stars

      妙达文字生成图片

      @nice1234-h · 1 stars

      妙达图片理解

      @nice1234-h · 0 stars

      Skill Vetter 1

      @h-harry · 0 stars

      sichuan-cuisine-rd

      @h-beatman · 0 stars

      sichuan-cuisine

      @h-beatman · 0 stars

      Published by @h-mascot on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]