OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Jun 24, 2026
Independent checks from skills.sh's audit partners.
The saga skill automates a complex development workflow by discovering and executing shell commands from a repository, spawning subagents, and maintaining persistent state. While powerful, it introduces security risks by executing arbitrary commands found in project documentation and manifests, and by transferring project data to potentially remote subagents.
Detected behaviors
No alerts
No issues