logvalet-my-next
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the workflow is narrowly aligned with a benign read-only Backlog reporting purpose, but it depends on an external `lv`/`logvalet` CLI whose provenance and official distribution are not established in this skill. No overt exfiltration, file writes, or hidden behavior are present, yet the opaque required executable creates high install-trust risk.
Confidence: 84%Severity: 78%
Audit Metadata