team-update — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  The team-update skill is a project management tool that automates standups and feedback triaging by gathering data from Git and chat platforms. It presents a low risk of indirect prompt injection because it processes untrusted messages from external chat channels, but this is effectively mitigated by mandatory human approval for all external actions.

  Risk: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONMar 19, 2026Full report

• Socket

  warn

  1 alert: gptAnomaly

  Mar 19, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWMar 19, 2026Full report

• Runlayer

  pass

  1/5 files flagged

  Risk: LOWMar 11, 2026Full report

• ZeroLeaks

  warn

  1 finding · Score: 69/100

  Risk: MEDIUMApr 16, 2026Full report