OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail2 providerslatest audit Feb 16, 2026
Independent checks from skills.sh's audit partners.
The skill establishes a framework for code refactoring and migration through coordinated worker tasks. The primary security concern is Indirect Prompt Injection, as the skill processes external source code and project documentation while possessing capabilities for command execution and file modification. This environment allows for malicious code in a repository to potentially manipulate the agent's behavior during the refactoring process.
Detected behaviors
No issues