OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Aug 10, 2026
Independent checks from skills.sh's audit partners.
The skill orchestrates a product development journey but contains instructions for the agent to recommend shell commands that perform global software installation from remote sources. It also ingests project documentation files, which could serve as a vector for indirect prompt injection if those files contain malicious instructions.
Detected behaviors
No alerts
No issues