OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill automates artist workspace setup but creates a risk of accidental credential leakage. It instructs the agent to create a .env file for secrets and later executes a 'git add -A' followed by a push, which could exfiltrate credentials if .gitignore is misconfigured.
Detected behaviors
No alerts
No issues