sprint-executor

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose is coherent for sprint orchestration, but its operational footprint is high-risk because it can autonomously trigger code changes, commits, issue transitions, and documentation updates based on external project content. No clear malware or credential-harvesting behavior is shown, and install trust appears mostly normal, but the combination of delegation, write/exec capability, and real-world actions makes it a high-impact orchestration skill that should require strong approval boundaries.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Apr 24, 2026, 12:43 PM
Package URL
pkg:socket/skills-sh/OntoLedgy%2Fol_ai_context_library%2Fsprint-executor%2F@1719a8556394608c8a90384dee363799573f735f