OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Jul 28, 2026
Independent checks from skills.sh's audit partners.
The skill is designed to automate GitHub pull request reviews using specialized tools. It follows security best practices by explicitly instructing the agent to avoid searching for or using local credentials. However, it is susceptible to indirect prompt injection because it processes untrusted data from pull requests, such as descriptions and code diffs, while possessing high-privilege capabilities like merging code.
Detected behaviors
1 alert: gptAnomaly
1 issue