OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The clerk-android skill is a development tool designed to assist with integrating Clerk authentication into native Android applications. The analysis confirms that it uses official vendor artifacts and documentation, following standard implementation patterns. No malicious behavior, obfuscation, or unauthorized exfiltration of sensitive data were detected. The skill is assigned a LOW verdict because it possesses an inherent attack surface for indirect prompt injection by reading and processing local project files, although it includes mitigation via an interaction contract requiring human confirmation before making any modifications.
Detected behaviors
No alerts
1 issue
3/4 files flagged
Score: 93/100 · 2 sections analyzed