gstack-sprint
Warn
Audited by Socket on Jul 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core workflow is coherent for a sprint orchestration skill, and its local file access is mostly proportionate. The main risk is transitive trust: it delegates implementation and planning to other skills/tools (especially ralph and gstack) whose install/update paths rely on mutable repo scripts and whose full behavior is outside this skill, so the overall footprint is broader than the skill text alone reveals.
Confidence: 84%Severity: 56%
Audit Metadata