OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill is safe. It functions as a README.md generator that extracts information from local repository documentation. Although it presents an indirect prompt injection surface by processing external file content without strict sanitization, the risk is negligible because the skill is restricted to text generation and lacks dangerous capabilities like code execution or network access. The automated scanner alert is a false positive that misidentified a local file path as a malicious URL.
Detected behaviors
No alerts
No issues
1/1 file flagged
1 finding · Score: 69/100