OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill is designed to refactor code by following instructions located in specific repository files. It is vulnerable to indirect prompt injection because it treats external markdown files as authoritative instructions. Additionally, it requires the ability to execute project tests, which involves running arbitrary code from the repository.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed