OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is generally safe but exhibits a low-severity indirect prompt injection vulnerability surface because it processes untrusted repository files and generates file outputs without explicit sanitization or boundary markers.
Detected behaviors
No alerts
No issues