impl-plan
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileThe skill's described purpose and workflow are coherently aligned: it is a planning/design tool that produces structured implementation plans with clear task granularity, IDs, categorization, and dependency tracking. The data flows are internal to plan generation and storage with no external data exfiltration or credential handling evident. The main risks relate to plan exposure (sensitive blockers or architectural decisions) and potential circular dependencies if tasks are not well-scoped, but these are mitigated by the explicit review steps and requirement to save and review plans. Overall, the footprint is benign given its stated purpose, with moderate risk primarily around data handling/permissions on the local filesystem and the need for access controls on the .tasks directory.