Loading npm security reports…
Claude Code skills for scrum project management — PRD to production release pipeline with project scaffolding, sprint planning, status tracking, sprint releases, full-project emulation testing, autonomous orchestration, and project cleanup.
LPM treats this as warn-only first-party agent extension lifecycle risk. Postinstall automatically installs this package's Claude skill files into a global or project Claude skills directory. It also alters the installing project's `.gitignore`; no exfiltration or remote payload execution was found.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgSource creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/install.jsView on unpkg · L1Package source references dynamic require/import behavior.
bin/install.jsView on unpkg · L2Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L10Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L10Package text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgSource creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/install.jsView on unpkg · L1Package source references dynamic require/import behavior.
bin/install.jsView on unpkg · L2