OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill instructs the agent to act as a proxy for an internal tool, executing a local script with raw user input. This pattern creates a potential attack surface for indirect prompt injection and command manipulation because user-provided text is concatenated into a shell command without explicit sanitization or escaping instructions.
Detected behaviors
No alerts
No issues