OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 8, 2026
Independent checks from skills.sh's audit partners.
The 'document' skill automates technical writing for Pull Requests, changelogs, and release notes by analyzing git repository history. It follows security best practices by requiring user confirmation before performing external actions via the GitHub CLI and includes specific instructions to identify and redact secrets found in code diffs. A minor surface for indirect prompt injection exists due to the processing of untrusted commit messages and diff content.
Detected behaviors
No alerts
No issues