OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The 'ghost-repo-context' skill maps and summarizes repository structures to provide security context. It identifies sensitive data and technology stacks using local shell commands. While it prohibits internet access, it is susceptible to indirect prompt injection from analyzed code and potential command injection via unsanitized input paths.
Detected behaviors
No alerts
No issues
3/4 files flagged
Score: 93/100 · 2 sections analyzed