OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill manages git branches and cleans up worktrees, but it contains a command injection surface by interpolating unsanitized variables into shell commands.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed