OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Jul 10, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates the OpenSEO release process by automating version bumps and drafting release notes from commit history and PR descriptions. The inclusion of untrusted content from PR bodies introduces a potential surface for indirect prompt injection, as this data is used to generate release documentation and is reviewed by subagents.
Detected behaviors
No alerts
1 issue