OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill enables the agent to read arbitrary content from GitHub via a third-party proxy and provides a tool-calling interface. This creates a significant Indirect Prompt Injection vulnerability where malicious repo documentation could control the agent.
Detected behaviors
No alerts
No issues
1/2 files flagged
Score: 93/100 · 2 sections analyzed