OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 17, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates addressing GitHub PR comments using the gh CLI. It utilizes a Python script to fetch PR metadata and requires escalated sandbox permissions for network and authentication tasks. Its primary security risk is indirect prompt injection from untrusted GitHub comments.
Detected behaviors
No alerts
2 issues