OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill documents conversation insights into local files. While it includes sanitization for file names and schema validation, it has an attack surface for indirect prompt injection as it writes user-provided content to the filesystem and can modify other skill directories.
Detected behaviors
No alerts
No issues
1/4 files flagged
Score: 93/100 · 2 sections analyzed