OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 17, 2026
Independent checks from skills.sh's audit partners.
The skill automates session handoffs by capturing work progress and learnings into persistent project files. It presents a low-severity surface for indirect prompt injection because it incorporates unvalidated content from the workspace, such as git diffs and user history, into durable memory files like MEMORY.md without explicit sanitization or boundary markers.
Detected behaviors
No alerts
No issues