OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Apr 18, 2026
Independent checks from skills.sh's audit partners.
The coding-agent skill automates software development by spawning external AI agents like Codex and Claude Code. It contains instructions for bypassing safety sandboxes and approval mechanisms using specific flags and parameters. Additionally, it is designed to process external code and pull requests, which presents a significant surface for indirect prompt injection attacks.
Detected behaviors
1 alert: gptMalware
3 issues