OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is a static security analysis tool for auditing GitHub Actions. It fetches and processes workflow files from remote repositories. While the skill includes robust safety guidelines to ensure untrusted content is treated as data rather than executable code, the ingestion of external, attacker-controlled input presents an inherent attack surface for indirect prompt injection.
Detected behaviors
1 alert: gptAnomaly
No issues
10/13 files flagged
Score: 93/100 · 2 sections analyzed