OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill executes unpinned remote code via 'npx atxp@latest' and uploads local markdown files to a third-party cloud service (atxp.ai). This creates risks of remote code execution and data exposure of sensitive agent memory files.
Detected behaviors
1 alert: gptSecurity
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed