OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
This skill provides a structured workflow for porting Semgrep rules between programming languages. It is generally safe but is susceptible to indirect prompt injection, a common risk for tools that process external files (in this case, user-provided Semgrep rules). The static analysis warning for 'eval' is a false positive, as it appears in a documentation guide as an example pattern rather than executable code.
Detected behaviors
No alerts
No issues
4/4 files flagged
Score: 93/100 · 2 sections analyzed