OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates GitHub Pull Request management using the official CLI. It is functional but presents a surface for indirect prompt injection and potential shell command injection if branch names or PR text contain malicious metacharacters.
Detected behaviors
1 alert: gptSecurity
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed