OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill sets up a voice-to-phone gateway by collecting multiple high-value credentials (Twilio, Deepgram) and extracting local tokens from the filesystem. It exposes a local server to the public internet via ngrok and executes code from an external, untrusted GitHub repository.
Detected behaviors
No alerts
No issues
1/1 file flagged