OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 6, 2026
Independent checks from skills.sh's audit partners.
The skill provides patterns for automating GitHub workflows with AI. It includes a surface for indirect prompt injection where untrusted data from pull request diffs or issue bodies could influence AI-generated responses. It also demonstrates high-privilege operations such as modifying branch protection settings and force-pushing to repository branches, which should be implemented with strict access controls.
Detected behaviors
No alerts
1 issue