OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
This skill provides infrastructure management scripts that contain hardcoded example credentials and practice unsafe handling of remote data. Specifically, it downloads Kubernetes manifests and SQL scripts from S3 and pipes them directly into 'kubectl apply' and 'psql' without any integrity verification. It also includes commands that install packages at runtime and perform high-privilege actions on DNS and cluster resources.
Detected behaviors
1 alert: gptSecurity
No issues
7/9 files flagged
Score: 93/100 · 2 sections analyzed