OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill is vulnerable to Remote Code Execution (RCE) because it executes build and test commands (make, go) on untrusted code from external pull requests. An attacker can provide a malicious Makefile or go.mod file to execute arbitrary commands on the agent's host system.
Detected behaviors
No alerts
No issues
1/1 file flagged