OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill automates code reviews by processing Sentry/Seer bug reports within GitHub PRs. While it uses legitimate tools to fetch and analyze PR comments, it is vulnerable to indirect prompt injection because it explicitly extracts and potentially obeys instructions labeled as a 'Prompt for AI Agent' found in external PR comments.
Detected behaviors
No alerts
No issues
1/1 file flagged