logvalet-my-week
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose and read-only behavior are coherent with a Backlog task viewer, and no obvious exfiltration or overbroad access is described. The main concern is install/execution trust: it relies on an unverified `lv` CLI with no official provenance or release evidence in the provided material, which makes the skill high risk from a supply-chain standpoint even though its stated functionality is otherwise proportionate.
Confidence: 84%Severity: 72%
Audit Metadata