OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is generally well-structured for QA documentation tasks but contains an unsafe eval pattern in its companion bash scripts that could allow command injection, along with a typical indirect prompt injection risk from processing untrusted requirements.
Detected behaviors
2 alerts: gptSecurity
No issues
1/8 files flagged
1 finding · Score: 86/100