Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit May 23, 2026
Independent checks from skills.sh's audit partners.
The 'goals' skill manages project fitness criteria and strategic mission alignment using the 'ao' CLI tool. It executes shell-based verification commands defined in local configuration files and exports project metrics for reporting. The skill is categorized as LOW severity because it processes and executes content from project-level files (GOALS.md/yaml), which represents an inherent attack surface for indirect prompt injection common in development automation tools.
Detected behaviors
No alerts
No issues
1/4 files flagged
Score: 93/100 · 2 sections analyzed