OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
Automates GitHub tasks like pull request reviews and issue management. The skill downloads the 'claude-flow' tool from NPM and processes untrusted data from GitHub repositories, creating a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed