OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill automates GitHub code reviews using AI swarms. It contains a significant security risk in its documentation: a webhook handler example that is vulnerable to command injection via Pull Request comments.
Detected behaviors
1 alert: gptAnomaly
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed