OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Mar 14, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates addressing GitHub PR comments using the gh CLI. It presents security risks by requesting escalated sandbox permissions and being vulnerable to indirect prompt injection from untrusted PR comments.
Detected behaviors
No alerts
2 issues