OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The 'tasks-explain-diff' skill generates Notion documentation from user-provided code changes. It is susceptible to indirect prompt injection because it processes untrusted code data and outputs to the Notion MCP without using delimiters or input sanitization. This could allow malicious instructions hidden in code comments to influence the agent's behavior.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed