OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides instructions for using the btca CLI to manage and query local or remote code resources. It is generally safe for its intended purpose but carries an inherent risk of indirect prompt injection because it processes untrusted data from external git repositories and npm packages.
Detected behaviors
No alerts
No issues
2/2 files flagged
Score: 93/100 · 2 sections analyzed