OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides comprehensive GitHub workflow automation using vendor-provided tools. It possesses an attack surface for indirect prompt injection when analyzing external data such as pull requests, repository code, or failure logs, though no malicious behavior was detected.
Detected behaviors
1 alert: gptSecurity
No issues
1/1 file flagged
2 findings · Score: 80/100