plot-sprint
Warn
Audited by Socket on Mar 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill fragment is internally consistent with its stated purpose of managing Plot sprints and their lifecycle using local file edits and Git-based commits. It does not exhibit active malicious behavior, credential handling, or external data flows. The primary risk is operational (exposure of sprint plans if misconfigured, or inadvertent commits to main) rather than security-exploitative. Overall security posture is BENIGN with a low to moderate operational risk due to SCM workflows; no evidence of malware or credential exfiltration.
Confidence: 75%Severity: 75%
Audit Metadata