OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 29, 2026
Independent checks from skills.sh's audit partners.
This skill integrates the Open Code Review (OCR) CLI tool into an agent's workflow for automated code reviews. It utilizes official tools from the alibaba-group namespace and includes explicit security guidance for preventing command injection when handling dynamic content. The classification reflects the inherent surface for indirect prompt injection common to all code analysis tools.
Detected behaviors
No alerts
No issues