OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides expert Deno knowledge but presents security risks through the recommendation of high-privilege commands and the processing of untrusted code without safety boundaries. It specifically encourages use of the '--allow-all' (-A) flag for remote scripts from registries not on the trusted source list, creating a potential Remote Code Execution (RCE) vector. Furthermore, its role in code review makes it vulnerable to indirect prompt injection.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed