OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill is a static analysis tool for codebase reviews, restricted to read-only operations (Read, Grep, Glob). It has no network or execution capabilities. The primary risk is a low-severity indirect prompt injection vulnerability where malicious comments in the analyzed code could attempt to influence the agent's report.
Detected behaviors
No alerts
No issues
1/1 file flagged