OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 17, 2026
Independent checks from skills.sh's audit partners.
This skill automates the creation of semantic PR walkthroughs by analyzing git logs, diffs, and GitHub metadata. It is a functional development tool from a known vendor that writes documentation to the local file system. A minor security risk exists regarding indirect prompt injection, as the skill processes untrusted content (commit messages, PR descriptions) without explicit instructions to ignore embedded agent commands.
Detected behaviors
No alerts
2 issues