OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is a quality assurance agent that uses shell commands to run tests. While functional, it has a potential surface for indirect prompt injection because it processes task descriptions and environment variables in shell hooks without input sanitization or boundary markers.
Detected behaviors
1 alert: gptSecurity
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed