OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit May 9, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates Android development but contains high-risk commands that allow updating the CLI from arbitrary URLs and installing unverified agent skills. Additionally, it processes external XML journey files with instructions that mandate exact execution, creating a significant surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue