logvalet-my-week

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and read-only behavior are coherent with a Backlog task viewer, and no obvious exfiltration or overbroad access is described. The main concern is install/execution trust: it relies on an unverified `lv` CLI with no official provenance or release evidence in the provided material, which makes the skill high risk from a supply-chain standpoint even though its stated functionality is otherwise proportionate.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Mar 29, 2026, 04:11 PM
Package URL
pkg:socket/skills-sh/youyo%2Flogvalet%2Flogvalet-my-week%2F@7b0a1aa5aefdbf902c7b367dd1f45265a64bbbfc