OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill provides a framework for software goal planning using the SPARC methodology. It relies on an external utility called 'claude-flow' executed via npx, which is not from a verified trusted source. Furthermore, it creates a potential surface for indirect prompt injection by processing user-provided development requirements and translating them into executable shell commands without explicit sanitization.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed