OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Apr 8, 2026
Independent checks from skills.sh's audit partners.
The skill manages development objectives via GitHub issues and platform-specific CLI tools. While functionally safe, it has an inherent surface for indirect prompt injection because it reads and processes content from GitHub issues and comments to determine its next actions.
Detected behaviors
1 alert: gptSecurity
1 issue
5 files scanned · No issues