OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
This skill downloads and executes unverified code at runtime using npx and uvx. It lacks version pinning and relies on untrusted third-party packages, presenting a high risk of Remote Code Execution (RCE) through supply chain attacks.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed