OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Jun 13, 2026
Independent checks from skills.sh's audit partners.
This skill analyzes and extracts principles from other installed skills to propose updates to rule files. The primary security risk is indirect prompt injection: if a malicious skill is present on the system, its content could influence this tool to suggest harmful or deceptive changes to your rules. It also uses local bash scripts to scan your filesystem, which is a functional requirement but represents an elevated capability.
Detected behaviors
No alerts
No issues