OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill automates social media publishing across various platforms. While it follows standard integration practices, it presents a surface for indirect prompt injection because it processes untrusted filenames from Google Drive to generate captions without sanitization or boundary markers.
Detected behaviors
1 alert: gptSecurity
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed