OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides infrastructure for agent identity, payments, and communication via the atxp CLI. It features an attack surface for indirect prompt injection through external data (search, email, SMS) and depends on runtime package execution via npx. It addresses these risks with security guidance and exfiltration guardrails.
Detected behaviors
1 alert: gptAnomaly
2 issues
1/1 file flagged
1 finding · Score: 86/100