OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 9, 2026
Independent checks from skills.sh's audit partners.
The skill is a robust automation tool for end-to-end pull request creation. It features well-defined security boundaries, including explicit instructions to ignore malicious directives found in data and strict validation for shell-interpolated variables. However, because the skill autonomously executes code and modifies repository state based on untrusted inputs (task briefs and external URLs), it possesses an inherent surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue