OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill is generally safe but carries a low risk of indirect prompt injection because it reads local file content and git diff outputs and feeds them into subordinate agent templates without boundary markers or input sanitization.
Detected behaviors
No alerts
No issues