OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides powerful GitHub CLI automation. It includes features for managing secrets, keys, and extensions, which are standard for the tool but present inherent risks of data exposure and remote code execution if the agent is misused. It also processes untrusted content from issues and discussions, creating a surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue
9/9 files flagged
Score: 93/100 · 2 sections analyzed