OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides a framework for QA automation but contains only skeleton scripts with no actual analysis logic. It presents a medium risk due to missing dependency configuration files (requirements.txt, package.json) that are referenced in documentation but absent from the bundle, making the software supply chain unverifiable. Additionally, the skill's intended purpose of processing and interpreting untrusted external codebases poses a risk for indirect prompt injection.
Detected behaviors
No alerts
No issues
7/7 files flagged
Score: 93/100 · 2 sections analyzed