OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill includes instructions that explicitly direct the agent to avoid inspecting its own code and skip checking certain directories, which could be used to hide malicious activity. Furthermore, the generation script is designed to read any file path provided as an argument and transmit its content to an external API, creating a risk of sensitive data exposure if the input is manipulated.
Detected behaviors
1 alert: gptAnomaly
1 issue
1/2 files flagged
Score: 93/100 · 2 sections analyzed