OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill automates Git and GitHub workflows for committing changes and managing Pull Requests, including support for stacked PRs. It implements robust security measures such as excluding sensitive files from commits, using temporary files for CLI interactions to avoid shell pitfalls, and validating branch names against a safe character set to prevent command injection. While the skill processes untrusted repository data for PR generation, which presents a low risk of indirect prompt injection, it uses effective boundary markers and sanitization techniques to mitigate this risk.
Detected behaviors
1 alert: gptAnomaly
1 issue