OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit May 8, 2026
Independent checks from skills.sh's audit partners.
The skill automates a complete engineering workflow including planning, implementation, and code review. It possesses autonomous capabilities to commit and push code to remote repositories and update pull requests or external project trackers like Linear and Jira with review findings. While these actions are consistent with its 'autonomous' purpose, the skill lacks sanitization for data interpolated from tool outputs, creating a surface for indirect prompt injection.
Detected behaviors
1 alert: gptSecurity
1 issue
1/1 file flagged
Score: 93/100 · 2 sections analyzed