OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit May 9, 2026
Independent checks from skills.sh's audit partners.
The skill establishes a structured and defensive workflow for reviewing dependency update PRs. It leverages multiple specialized advisors to assess security, code quality, and repository impact before a human maintainer makes a final decision. The skill includes strong safety guardrails, notably the requirement for explicit maintainer confirmation before any repository mutation (like merging or rebasing) and structured checkpoints for research and verdicts. The primary security consideration is the inherent attack surface for indirect prompt injection via the PR data it processes, which is well-mitigated by the human-in-the-loop requirement.
No alerts
1 issue
8/14 files flagged
1 finding · Score: 69/100