OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill automates GitHub issue triage and pull request verification. It presents a security risk by instructing the agent to execute arbitrary tests or commands from untrusted external pull requests. Additionally, it lacks input sanitization for external issue and PR content, making it susceptible to indirect prompt injection.
Detected behaviors
No alerts
1 issue