OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill acts as a development utility for creating, validating, and packaging AI agent skills. It includes several Python scripts that perform file system operations. While these tools are functional and incorporate best practices like safe YAML loading and metadata validation, the scripts operate on user-provided file paths and metadata, which introduces a surface for indirect prompt injection and unintended file system access if an agent is directed to process untrusted input.
Detected behaviors
No alerts
No issues
7 files scanned · No issues