OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 11, 2026
Independent checks from skills.sh's audit partners.
The skill installs and runs a 'diffity' CLI tool to display code changes. It accepts user-provided references and GitHub PR URLs, which creates a surface for both command injection (via shell interpolation) and indirect prompt injection (via external content ingestion).
Detected behaviors
No alerts
1 issue