OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill is designed for automated code reviews and is generally safe. It correctly utilizes trusted external resources and standard GitHub CLI tools. However, it possesses an inherent surface for indirect prompt injection because it processes untrusted Pull Request content while having the capability to write back to the repository via the GitHub API.
Detected behaviors
No alerts
No issues
4/7 files flagged
Score: 93/100 · 2 sections analyzed