OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill coordinates complex GitHub operations across multiple repositories using automated shell scripts. It utilizes a non-standard character substitution syntax (replacing separators with '$') for URLs and file paths, which acts as a form of obfuscation. Furthermore, the skill processes external repository data without adequate sanitization or boundary markers, creating a risk for indirect prompt injection where malicious content within a repository could influence the agent to execute unauthorized commands or modifications.
Detected behaviors
No alerts
2 issues
1/1 file flagged
2 findings · Score: 80/100