Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Aug 7, 2026
Independent checks from skills.sh's audit partners.
The sync skill automates the reconciliation of project documentation, such as AGENTS.md and feature scopes, with actual code changes. A core component of the skill involves discovering and installing external agent skills and MCP servers from GitHub based on the project's dependencies. While the skill includes a mandatory user consent step before performing searches or installations, the underlying functionality involves downloading and executing third-party code and sharing the project's technology stack with external search engines.
Detected behaviors
No alerts
No issues