OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
The skill provides React-based D3.js visualization templates. It contains a potential Cross-Site Scripting (XSS) vulnerability surface in the interactive tooltip implementation, which could be exploited if the agent processes malicious data.
Detected behaviors
No alerts
No issues
7/7 files flagged
2 findings · Score: 80/100