OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
This skill retrieves content from Twitter/X and X Articles using various APIs and CLI tools. It contains a high-risk command pattern that pipes remote data directly into a Python interpreter and uses dynamic package installation via the 'uv' manager. It is also inherently vulnerable to indirect prompt injection from the content it fetches.
Detected behaviors
1 alert: gptAnomaly
1 issue
4/4 files flagged
Score: 93/100 · 2 sections analyzed