OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
The Animation Designer skill is designed to modify project files based on user-provided natural language instructions. It is vulnerable to indirect prompt injection because it grants file-system modification privileges without implementing boundary markers or sanitization for untrusted inputs. Additionally, the metadata includes an irrelevant 'rag' tag, which constitutes metadata poisoning.
Detected behaviors
No alerts
No issues
3/3 files flagged
Score: 93/100 · 2 sections analyzed