OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Apr 8, 2026
Independent checks from skills.sh's audit partners.
The skill is designed to classify pull request feedback using a specialized CLI tool called 'erk'. It provides structured JSON output, which is a good safety practice. However, because it processes feedback provided by external users in PR comments, it has a potential surface for indirect prompt injection where malicious comments could try to misdirect the agent's analysis.
Detected behaviors
No alerts
1 issue
1/1 file flagged