OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Aug 12, 2026
Independent checks from skills.sh's audit partners.
The skill automates specification synchronization using a CLI tool. It is susceptible to potential command injection via unsanitized user inputs in shell commands and indirect prompt injection through the processing of external specification files.
Detected behaviors
No alerts
1 issue