OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit May 16, 2026
Independent checks from skills.sh's audit partners.
The 'bug-hunt' skill facilitates systematic code investigation and auditing. While structurally sound and following logical phases, it possesses a surface for command injection due to the interpolation of unvalidated user input into shell commands and a vulnerability to indirect prompt injection from the source code being analyzed.
Detected behaviors
No alerts
No issues
2/5 files flagged
1 finding · Score: 69/100