backlog-grooming-assistant
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is a simple backlog-grooming assistant, but the actual footprint includes unrestricted shell execution with no clear justification, while the instructions remain vague and non-specific. There is no evidence of malware, credential harvesting, or third-party routing, but the permissions are broader than necessary for the claimed task.
Confidence: 87%Severity: 62%
Audit Metadata