OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill performs web searches and extracts content using the Brave Search API. Its primary security risk is Indirect Prompt Injection, as it retrieves and processes untrusted web content that could contain malicious instructions for the AI agent. Additionally, the lack of URL validation allows for potential Server-Side Request Forgery (SSRF) against internal network resources.
Detected behaviors
No alerts
No issues
6/6 files flagged
Score: 93/100 · 2 sections analyzed