OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is safe to use but contains a surface for indirect prompt injection because it processes untrusted local file content (git diffs) without explicit instructions to ignore embedded commands.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed