Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill automates authentication for Adobe AEM Edge Delivery Services by opening a browser for login and capturing the resulting token via a local callback server. It follows security best practices for token storage, such as using restricted file permissions. However, the skill contains a potential code injection vulnerability where data from untrusted sources, such as local configuration files or user-provided URLs, is interpolated into dynamically executed scripts without adequate sanitization.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed