sprint-dev

SUSPICIOUS. The skill’s overall purpose is coherent for sprint orchestration, and its GitHub/Trello/git usage is proportionate. Main risk comes from load-time script execution, broad Bash/Agent capabilities, real-world tracker mutations, and especially untrusted external content flowing into code-writing sub-agents. No strong signs of malware or credential theft, but the execution model is medium risk.