OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 12, 2026
Independent checks from skills.sh's audit partners.
The skill provides a structured workflow for performing code reviews, allowing for project-specific customization and automation. It executes local scripts and processes codebase data such as git diffs and PR metadata. The security posture is generally safe for a developer tool, with low-severity findings related to dynamic execution of configuration-defined steps and potential indirect prompt injection from codebase content.
Detected behaviors
No alerts
No issues