OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides capabilities to auto-fill document templates with data from external files like CSVs. It introduces a potential indirect prompt injection surface if untrusted data sources contain malicious instructions meant to influence the AI agent during processing. All libraries used are standard and legitimate.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed