OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill automates PR reviews using comments from the Sentry Seer bot. It includes a specific filter to only trust comments from the official bot account, which mitigates impersonation risks. However, the process of parsing 'AI Prompts' from external comments creates an indirect prompt injection surface.
Detected behaviors
No alerts
1 issue
1/1 file flagged