OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is a planning assistant that researches codebases and generates structured implementation plans. While it does not execute code directly, it lacks boundary markers when processing external data (codebase content and user requests), making it susceptible to indirect prompt injection where malicious code comments could influence the generated plans or subagent reviews.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed