Security audit
Security checks for vulnerabilities and agentic risk
This skill performs a disclosed, read-only benchmark audit; its GitHub PR lookup broadens scope slightly but remains non-mutating and purpose-aligned.
Install this if you want a rigorous read-only audit of a benchmark repository. Be aware that the workflow may query GitHub PR metadata with your local gh authentication; avoid running it in environments where even read-only PR metadata access is not acceptable.
The skill is presented as a read-only local repo audit, but it mandates querying GitHub PR state via gh pr list, which expands scope beyond the target repository. This is a capability mismatch: it can disclose or depend on remote metadata and network access not necessary for many local audits, though it does not itself execute code or modify state.
Requiring GitHub PR enumeration as a standing, non-optional step gives the skill broader access than its core benchmark-integrity function requires. In environments with sensitive remotes, private repository metadata, or restricted network policies, this unnecessary remote lookup can leak contextual information or violate least-privilege expectations.
The documentation presents the skill as a read-only benchmark audit focused on the target repository, which suggests repo-contained inspection. Later instructions require checking open PRs via gh pr list, creating a mild contradiction between the narrow read-only repo-audit framing and actual behavior that reaches into external repository hosting state.
