OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 17, 2026
Independent checks from skills.sh's audit partners.
This skill automates a GitHub workflow but contains potential security risks, including a command injection surface via user-provided descriptions and a dangerous instruction to 'run' a generated markdown file. It also allows for the dynamic installation of unspecified dependencies.
Detected behaviors
No alerts
No issues