OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides a relay for delegating tasks to the Warp Agent CLI (`oz`). The implementation of the relay script is robust against common attacks like command injection and flag injection. However, the workflow involves executing an un-sandboxed external agent with full user permissions, which creates a surface for indirect prompt injection if a malicious task description is provided. The skill mitigates this by providing detailed instructions for human-in-the-loop review of all changes.
Detected behaviors
No alerts
No issues