OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 14, 2026
Independent checks from skills.sh's audit partners.
This skill automates the management of a community extension catalog by processing GitHub issue submissions. It is vulnerable to indirect prompt injection because it incorporates untrusted data from external sources (issue bodies and third-party repositories) into the agent's context and uses it to modify project files and create pull requests.
Detected behaviors
No alerts
1 issue