OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Jul 10, 2026
Independent checks from skills.sh's audit partners.
The skill is a utility for logging repository friction ('papercuts') to a local file. It is primarily safe and includes explicit instructions to avoid logging sensitive data like credentials. It has a minor indirect prompt injection surface because it reads and acts upon content stored in a project file, which is a common characteristic of such workflow tools.
Detected behaviors
No alerts
No issues