OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The security-review skill is an AI-powered codebase security scanner. While the skill's workflow and documentation are safe, its design involves ingesting and analyzing untrusted code from external repositories. This creates a surface for indirect prompt injection, where malicious instructions hidden in a project's source code could attempt to influence the agent's findings or recommendations. The skill lacks explicit boundary markers or instructions to ignore embedded directives in the data it processes.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed