OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill outlines a methodology for orchestrating subagents to implement tasks from a plan file. While functionally safe for development workflows, it possesses an inherent attack surface for indirect prompt injection as it ingests and processes task descriptions from external files without using boundary markers or sanitization.
Detected behaviors
No alerts
No issues