OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill introduces a potential command injection and indirect prompt injection risk by dynamically constructing and executing CLI commands using templates from a configuration file, substituting untrusted web search queries and URLs without sanitization.
Detected behaviors
No alerts
1 issue