OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 12, 2026
Independent checks from skills.sh's audit partners.
The skill is a release engineering tool designed to draft changelog entries by processing pull request metadata. It includes robust security instructions that define clear boundaries for untrusted data, requiring the agent to ignore directives embedded in repository content. While it processes external inputs (PR titles and bodies) which is an inherent risk surface, it implements significant mitigations including input validation, secret redaction, and a mandatory human review step before publication.
Detected behaviors
No alerts
1 issue