OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill is classified as HIGH risk because it ingests untrusted data from over 50 external marketplaces and processes it without explicit sanitization or boundary markers. While intended for market research, the exposure of an agent to potentially malicious content (indirect prompt injection) from external websites, combined with the ability to execute code and write files, creates a significant attack surface.
Detected behaviors
No alerts
No issues
2/3 files flagged