OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is a security scanner that downloads and installs a binary from the vendor's GitHub repository. It processes local repository files to identify vulnerabilities, which introduces a potential surface for indirect prompt injection from malicious project files. All external resources are associated with the vendor.
Detected behaviors
1 alert: gptSecurity
1 issue
10/10 files flagged
Score: 93/100 · 2 sections analyzed