gstack-sprint

Warn

Audited by Socket on Jul 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core workflow is coherent for a sprint orchestration skill, and its local file access is mostly proportionate. The main risk is transitive trust: it delegates implementation and planning to other skills/tools (especially ralph and gstack) whose install/update paths rely on mutable repo scripts and whose full behavior is outside this skill, so the overall footprint is broader than the skill text alone reveals.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 25, 2026, 08:10 PM
Package URL
pkg:socket/skills-sh/sehoon787%2Fmy-codex%2Fgstack-sprint%2F@96907ae8a91bab12b365c639afdd7c797fbd45a686518929cacfe71e506e9c21
Security Audit — socket — gstack-sprint