sprint-plan — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sprint-plan (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Help me plan my sprint/current cycle in LifeOS and apply the resulting changes. This is a mutating workflow.
Use the LifeOS MCP tools:
get_planning_context with:include.currentCycle=trueinclude.backlog=trueinclude.weekly=trueinclude.daily=truedueDate.schedule_issue or update_issue usingscheduledStartAt and scheduledEndAt ISO datetimes, or date/scheduledDate plus startTime and endTime.
create_calendar_blockfor time that should shape cycle capacity but should not create a PM issue, such as dog walking, recurring focus blocks, appointments, travel, or holds.
apply_planning_patch with mode="cycle" and dryRun=false.Useful apply_planning_patch operations:
create_issue for new work.create_calendar_block for protected non-ticket calendar-only time. Payloadmust include title, timezone, and either startAt/endAt ISO datetimes or date plus local startTime/endTime; optional fields include blockType, source, and isProtected.
assign_issue_to_current_cycle for selected cycle work.schedule_issue or update_issue for due date, scheduled start/end time,status, priority, estimate, and title changes.
set_top_priority for immediate focus.update_cycle_goals for the active cycle.save_weekly_note or save_daily_note when useful as the readable planartifact.
Calendar decision rule:
create_calendar_block for protected personal or planning time that is notexecution work and should not become a task: dog walking, commute buffers, appointments, recurring focus blocks, calendar holds, travel, or recovery time. Default to isProtected=true; use blockType="focus" for focus blocks, blockType="personal" for dog walking or personal care, blockType="travel" for travel, and blockType="hold" for tentative protected holds.
create_issue for new execution work that needs task tracking, ownership,status, priority, project/cycle assignment, comments, or completion history.
schedule_issue or update_issue when an existing or newly createdtask-backed item needs a due date or scheduled calendar time.
Do not ask for confirmation after this skill is invoked. The user expects this workflow to mutate LifeOS.
After applying, report:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.