OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is safe to use and facilitates GitHub project management through automation tools. It utilizes 'npx' to execute scripts from the author's ecosystem and processes external data from GitHub issues and comments, which presents a surface for indirect prompt injection.
Detected behaviors
1 alert: gptSecurity
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed