OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is a comprehensive code review assistant that analyzes pull requests and source code using specific personas and protocols. While functionally useful, it has an inherent attack surface because it processes untrusted external data (code, PR descriptions, and comments) and has the capability to execute GitHub CLI commands, which could be targeted by indirect prompt injection.
Detected behaviors
No alerts
1 issue
1/1 file flagged
Score: 93/100 · 2 sections analyzed