OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Apr 12, 2026
Independent checks from skills.sh's audit partners.
The skill analyzes codebases and proposes improvements via GitHub issues. It is vulnerable to indirect prompt injection because it processes untrusted codebase content and uses it to generate external output without requiring a human review of the final issue content.
Detected behaviors
No alerts
No issues