OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit May 24, 2026
Independent checks from skills.sh's audit partners.
The skill provides a high-quality, security-focused set of CI/CD configurations for Golang projects. It correctly emphasizes official tools, secret management via GitHub Secrets, and least-privilege repository permissions. While the AI-driven review component introduces a surface for indirect prompt injection from reviewed content, the skill proactively documents this and provides appropriate security safeguards and permission scoping.
1 alert: obfuscatedFile
2 issues
Score: 93/100 · 2 sections analyzed