OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Sep 7, 2026
Independent checks from skills.sh's audit partners.
The skill provides a tool for indexing and searching local coding history but employs several high-risk security patterns. It promotes an unverified remote code execution path via its installer, establishes persistence through automated background scheduling, and uses instructions designed to override agent safety guidelines. Furthermore, multiple documentation files were flagged as malware by automated reputation scanners.
Detected behaviors
9 alerts: gptAnomaly, gptSecurity, obfuscatedFile
No issues