OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The app-builder skill is a high-privilege project orchestrator that uses Bash and file-writing tools to scaffold and run full-stack applications. It performs numerous external downloads and remote code executions based on untrusted user-provided natural language, creating a significant surface for supply chain attacks and indirect prompt injection.
Detected behaviors
No alerts
No issues
12/20 files flagged
Scan incomplete