OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill dynamically installs dependencies and executes arbitrary JavaScript code provided through command-line arguments or standard input. This design allows for remote code execution if the input code is sourced from untrusted web content or malicious prompts.
Detected behaviors
1 alert: gptAnomaly
No issues
5/5 files flagged
Score: 93/100 · 2 sections analyzed