OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Apr 28, 2026
Independent checks from skills.sh's audit partners.
This skill relies on a third-party tool called 'vardoger' to analyze sensitive local Copilot CLI conversation history and modify configuration files. It explicitly requests the user to bypass sandbox restrictions to allow the tool to write data outside the current project directory.
Detected behaviors
No alerts
1 issue