OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill is vulnerable to command injection through its PDF verification logic and uses insecure browser sandbox configurations. It also presents a significant attack surface for indirect prompt injection when processing untrusted HTML or URLs.
Detected behaviors
1 alert: gptSecurity
1 issue
4/4 files flagged
Score: 93/100 · 2 sections analyzed