OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill performs deterministic inspection of a local WordPress repository using a provided Node.js script. No malicious behavior was detected in the skill instructions, but a low risk of indirect prompt injection exists when processing untrusted repositories.
Detected behaviors
No alerts
No issues
3/3 files flagged