OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill requires the installation of a third-party plugin from an untrusted source and requests an API key to grant the agent broad access to sensitive external accounts. This architecture presents risks for data exposure and indirect prompt injection.
Detected behaviors
1 alert: gptMalware
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed