OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 20, 2026
Independent checks from skills.sh's audit partners.
The skill enables monitoring brand reputation by scraping data from various social media and review platforms using Apify Actors. It relies on the user's Apify API token and interacts with official Apify services. A low-risk surface for indirect prompt injection exists because the skill processes untrusted external content, such as user reviews and comments, which could potentially contain instructions intended to influence the agent's behavior.
Detected behaviors
No alerts
2 issues
2/2 files flagged