OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit May 22, 2026
Independent checks from skills.sh's audit partners.
This skill is a project planning system that persists state in Markdown files and provides session recovery by reading local conversation history. While functionally robust, it accesses sensitive conversation logs and uses shell hooks to dynamically search for and execute lifecycle scripts from a shared plugin cache, which could potentially be abused if other malicious files are present in the environment.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed