OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Jun 13, 2026
Independent checks from skills.sh's audit partners.
The skill establishes a multi-agent code review workflow that processes untrusted external data (source code and diffs). While providing valuable review functionality, it lacks input sanitization or boundary markers, creating a surface for indirect prompt injection, especially given its capabilities to modify files and execute tests in iterative mode.
Detected behaviors
No alerts
No issues