OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit May 16, 2026
Independent checks from skills.sh's audit partners.
The skill is safe for code analysis but has a minor risk of indirect prompt injection. It uses standard tools like Git, Pylint, and Ripgrep to find duplicated code in your project. A minor concern exists where instructions hidden in the code being analyzed could potentially trick the AI agent into misreporting its findings.
Detected behaviors
No alerts
No issues