OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates the creation of internal reports by reading data from Slack, Google Drive, and Email. No malicious code or exfiltration patterns were found. However, the skill is vulnerable to Indirect Prompt Injection because it lacks sanitization or boundary markers for the external data it processes.
Detected behaviors
No alerts
No issues
6/6 files flagged
Score: 93/100 · 2 sections analyzed