OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 12, 2026
Independent checks from skills.sh's audit partners.
The skill is a code-fix automation tool that applies changes based on a previous step's analysis. It incorporates security boundaries, such as treating repository content as untrusted data and enforcing sanitization rules. However, it inherently maintains an attack surface by executing repository-defined validation commands and supporting local instruction overrides. These features are necessary for its function but could be exploited via indirect prompt injection if an attacker compromises the repository's configuration.
Detected behaviors
No alerts
1 issue