gds-sprint-status

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core file-reading/reporting behavior matches the stated purpose and there is no direct external data exfiltration. However, the skill also executes project-local resolver and customization-driven steps, giving local project files a command-execution path disproportionate to a sprint-status summary workflow.

Confidence: 88%Severity: 64%
Audit Metadata
Analyzed At
Sep 5, 2026, 08:01 PM
Package URL
pkg:socket/skills-sh/bmad-code-org%2Fbmad-module-game-dev-studio%2Fgds-sprint-status%2F@0cdf5757b6512a634c2ec067cc658ed2793ae5e2a35d898aa4e0a56dcd156e48
Security Audit — socket — gds-sprint-status