OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill automates software release workflows by integrating GitHub CLI with a vendor-specific orchestration tool. It is susceptible to indirect prompt injection because it ingests untrusted data from commit messages and pull request descriptions without sanitization, which could allow an attacker with repository access to influence the release process or generated changelogs.
Detected behaviors
1 alert: gptSecurity
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed