OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill provides documentation and command patterns for managing Git notes. While its primary purpose is legitimate repository management, it documents features that allow for the ingestion of untrusted metadata from commit history and external files, which represents an indirect prompt injection surface.
Detected behaviors
No alerts
No issues