OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates codebase exploration by downloading and executing the GitNexus utility from a public registry. While the downloads originate from the vendor's own package, the skill's primary function involves processing external repository data, which presents an inherent surface for indirect instructions to be ingested from analyzed code.
Detected behaviors
No alerts
No issues
2 files scanned · No issues
Score: 93/100 · 2 sections analyzed