OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 19, 2026
Independent checks from skills.sh's audit partners.
The skill provides a set of production ML engineering templates and tools. It contains indirect prompt injection surfaces where untrusted data (user input and retrieved context) is interpolated into LLM prompts without sanitization or strict boundary markers.
Detected behaviors
No alerts
No issues
7/7 files flagged