sprint-executor
Warn
Audited by Socket on Apr 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's purpose is coherent for sprint orchestration, but its operational footprint is high-risk because it can autonomously trigger code changes, commits, issue transitions, and documentation updates based on external project content. No clear malware or credential-harvesting behavior is shown, and install trust appears mostly normal, but the combination of delegation, write/exec capability, and real-world actions makes it a high-impact orchestration skill that should require strong approval boundaries.
Confidence: 85%Severity: 72%
Audit Metadata