OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill scrapes competitor ads from external platforms and saves files to the local home directory. This creates a high risk of Indirect Prompt Injection, where malicious text within an ad could manipulate the agent into performing unauthorized file operations or exfiltrating data from the user's computer.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed