OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 7, 2026
Independent checks from skills.sh's audit partners.
This skill is designed to automatically generate and execute test suites based on uncommitted code changes. While it follows good practices like asking for user confirmation before installing packages, it is inherently susceptible to indirect prompt injection because it processes untrusted source code and specification files without specific sanitization or boundary markers.
Detected behaviors
No alerts
No issues