OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Jun 18, 2026
Independent checks from skills.sh's audit partners.
The skill downloads and installs code from an unverified GitHub repository, which poses a risk of remote code execution if the source is malicious. Additionally, the tool's core function of auditing source code makes it vulnerable to indirect prompt injection from analyzed content.
Detected behaviors
No alerts
1 issue