OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill performs documentation analysis and executes shell commands extracted from local project files. While it includes a human-in-the-loop confirmation step, it is inherently vulnerable to indirect prompt injection where malicious instructions in a repository's documentation can lead to the execution of harmful commands.
Detected behaviors
No alerts
No issues