PowerShell good first issues

The SECURITY.md file instructs users to report vulnerabilities privately but fails to provide any contact information or channels for doing so. This makes it impossible for users to follow the stated policy, likely leading to public disclosure of security issues. The proposed solution is to update the SECURITY.md file with a valid contact method, such as GitHub's Private Vulnerability Reporting feature and an email address, similar to another repository within the same organization.

A scheduled "Excavator" task failed, as indicated by a GitHub Actions run. The issue requires fixing a manifest, checkver, or autoupdate problem within the specified commit.

The README's quickstart guide for macOS/Linux users instructs them to run 'setup.sh' directly, but the script is not executable and not in the system's PATH. The issue proposes updating the README to use 'bash setup.sh' or making the script executable and using './setup.sh'.

The user is encountering a "(403) Forbidden" error when trying to install the `files-np` application using Scoop. This indicates a problem with accessing the download URL for version 4.2.9.0, likely due to a permission issue or an invalid URL on the server side.

The issue reports a failed download of the openark@3.0.0 package due to an incorrect URL. The provided URL leads to a 404 Not Found error, and a corrected URL is offered, indicating a manifest file needs to be updated.

The user is experiencing a download failure when trying to install or update fman-np to version 1.7.3 using Scoop. The download process, which uses aria2c, encountered an unknown error (Error 1) while attempting to fetch the installer from the specified URL.

The user is reporting a failed download when attempting to update the 'openark' package from version 2.0.0 to 3.0.0. The download failed with an HTTP 404 error, indicating that the resource was not found at the specified URL. This suggests an issue with the download link in the package manifest.

This issue proposes refactoring Power BI API calls within the PowerBIRestHelper.psm1 module. Currently, API endpoint URIs and scopes are hardcoded, which contradicts the established pattern of dynamically retrieving this information from the ScubaGearApiCatalog.json file. The goal is to align the Power BI provider with other providers by making these values configurable and centrally managed.

This issue aims to improve the resilience of Entra functional tests by redesigning how conditional access policies are handled. The `UpdateCachedConditionalAccessPolicyByName` helper function will be updated to disable all policies and then modify the first one, removing reliance on specific tenant CAP names. This change also involves updating test plans, removing hardcoded CAP references, and deprecating documentation related to tenant setup.

This issue flags a documentation file, `.github/skills/project-planning/adr-author/references/lineage-rules.md`, as stale because its last update date is over 90 days old. The required action is to review, update the `ms.date` frontmatter, and verify the technical accuracy of the content before closing the issue.

The VNC Viewer application can no longer be downloaded using Scoop because RealVNC has removed its public download links. The issue indicates a 404 Not Found error for both 64-bit and 32-bit versions, and the root cause is a change in RealVNC's distribution policy.

The user is seeking assistance to disable the Neural Processing Unit (NPU) on Copilot+ PCs. They require help from users who own these devices to gather information about NPU device names and properties by running specific PowerShell commands.

A scheduled "Excavator" task failed, as indicated by a GitHub Actions run. The issue likely stems from a problem with the manifest, checkver, or autoupdate configuration, and the reporter requests the issue be closed once these are resolved.

The user is experiencing frequent 504 Gateway Timeout errors when accessing their SonarQube instance hosted on an app service. This issue is disrupting their CI/CD pipelines and preventing access to the SonarQube site. SonarQube support has directed them to the app service maintainers for assistance.

The user is encountering a "V11 Not Digitally Signed Error" when trying to run a script on Windows 11, regardless of whether PowerShell is run with elevated or non-elevated privileges. They are unsure what additional information would be helpful for troubleshooting.

The setup scripts for MemClaw incorrectly hardcode the API URL to `http://localhost:8000` and do not respect the `MEMCLAW_API_URL` environment variable. This causes setup to fail or hang for users running MemClaw on a different port, host, or within a containerized environment. The proposed solution is to dynamically read the URL from `MEMCLAW_API_URL` or default to `http://localhost:8000` and use this single variable throughout the scripts.

The `setup.sh` script incorrectly handles errors from the `openclaw agents add` command by discarding stderr and always displaying a generic 'may already be registered' warning. This masks other potential registration failures, such as unsupported flags or network issues. The proposed solution involves capturing and analyzing the command's output to provide more specific error messages.

The `setup.ps1` script incorrectly reports agents as 'Registered' even when the `openclaw agents add` command fails. This is because PowerShell's `$ErrorActionPreference = "Stop"` does not treat non-zero native command exit codes as errors, preventing the `catch` block from being triggered. The proposed solution is to explicitly check the `$LASTEXITCODE` after `openclaw agents add` and `openclaw gateway restart` commands to handle failures correctly.

The developer is seeking testers for a new AMD GPU overclocking feature planned for the next release. This feature is currently disabled by default and requires specific configuration on both Linux and Windows. Testers are asked to provide specific command outputs before and after enabling the feature, and to report any issues encountered.

This issue points out an inconsistency in the documentation regarding the capitalization of the '[!Note]' tag. The reporter suggests normalizing all instances to '[!Note]' for consistency, noting it's a minor stylistic change.

This enhancement request proposes adding a new PowerShell command, `Add-PSDepend`, to programmatically append dependencies to a `requirements.psd1` file. The command should support adding dependencies from PowerShell Gallery (by name and version) and GitHub (by repository and reference).

The download for dmg2img version 1.6.7 failed due to a connection error with the specified URL. The URL itself appears to be invalid, indicating a problem with the source or the link provided in the manifest.

On Entra-Joined Windows 11 devices with Modern Standby enabled, the device lock policies are bypassed upon waking, allowing users to log in without authentication. This behavior is similar to workgroup devices and can be resolved by disabling the 'Allow users to select when a password is required when resuming from connected standby' setting.

This issue describes a mismatch between the .json policy files in the repository and the policies deployed in Microsoft Intune. Specifically, the repository's policies are missing the `auditRuleInformation` field, which is being added by Intune for recent changes like STIG audit baselines. This discrepancy causes monitoring tools to report policy drift.

This issue proposes the removal of the legacy `UninstallModules.ps1` script from the ScubaGear project. The script is redundant and has been superseded by the `Reset-ScubaGearDependencies` command. The task involves deleting the script and updating all project documentation to reflect this change.

The `memclaw-governance.md` file is duplicated in four locations within the repository, with the setup scripts overwriting the agent-specific copies from the root file. This leads to lost changes when agents are modified directly and stale copies in Git if setup isn't re-run. The issue proposes two solutions: either making the root file the single source of truth and ignoring agent copies, or ensuring committed copies always match the root file.

This issue addresses outdated references to the retired 'caura-memclaw' repository name within setup scripts, CLAUDE.md, and the README. The goal is to update clone URLs and local directory paths to the new 'caura-ai/caura' repository name for clarity and to avoid reliance on GitHub redirects. The proposed solution involves find-and-replace operations and a minor decision on a consistent local directory name, while ensuring backward compatibility for existing installations.

The `.openclaw/openclaw.json` file incorrectly includes machine-specific runtime timestamps that are regenerated on every `openclaw doctor` or `openclaw gateway restart`. This leads to a "dirty tree" status for all contributors and creates noisy, unrelated diffs in pull requests. The proposed fix is to remove these runtime fields from the committed file, as the gateway can regenerate them, and to document this exclusion in the contribution guidelines.

Three undocumented Markdown files (`HEARTBEAT.md`, `TOOLS.md`, `USER.md`) are present in multiple agent workspaces within the repository. The issue requests either documentation and demo-specific content for these files or their removal if they are not used by the current demo.

A link in the README's table of contents points to a non-existent anchor. The anchor `#how-it-works` is broken because the corresponding heading was renamed. The fix involves updating the table of contents link to match the new heading.