OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill is safe but contains an indirect prompt injection surface because it is designed to analyze project source code and metadata to identify multi-tenancy signals. This surface could be exploited if an attacker provides a project containing malicious instructions hidden in code comments or UI text.
Detected behaviors
No alerts
No issues
2 files scanned · No issues
Score: 93/100 · 2 sections analyzed