OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
This skill performs adversarial reviews by invoking external command-line tools but is vulnerable to command injection and indirect prompt injection. Untrusted content from code diffs is interpolated directly into shell commands, potentially allowing arbitrary code execution, and the lack of prompt isolation allows external inputs to manipulate agent behavior.
Detected behaviors
No alerts
1 issue
2 files scanned · No issues
Score: 93/100 · 2 sections analyzed