logvalet-my-next

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the workflow is narrowly aligned with a benign read-only Backlog reporting purpose, but it depends on an external `lv`/`logvalet` CLI whose provenance and official distribution are not established in this skill. No overt exfiltration, file writes, or hidden behavior are present, yet the opaque required executable creates high install-trust risk.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:12 PM
Package URL
pkg:socket/skills-sh/youyo%2Flogvalet%2Flogvalet-my-next%2F@64063c29c998af45faa1c7f5878714d8bdd2938c