OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill processes untrusted user data (interviews and behavior logs) through a Python script to generate design insights. This creates a high-risk surface for indirect prompt injection, where malicious instructions embedded in user data could influence the agent's behavior or design recommendations.
Detected behaviors
No alerts
No issues
2 files scanned · No issues
Score: 93/100 · 2 sections analyzed