OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides workflows for managing GitHub pull requests and branches using the git and gh command-line tools. While generally safe, it presents a low risk of indirect prompt injection if untrusted pull request metadata, such as titles or branch names, is incorporated into shell commands without sanitization.
Detected behaviors
No alerts
No issues
2/3 files flagged
Score: 93/100 · 2 sections analyzed