OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 30, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates Airflow DAG testing and debugging via the 'af' and Astro CLI tools. It is a legitimate vendor-provided toolset but possesses an indirect prompt injection surface because it processes untrusted task logs without sanitization while having the capability to execute commands and modify files.
Detected behaviors
1 alert: gptAnomaly
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed