OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
This skill allows running SQL queries via DuckDB. It contains several security risks, including potential command injection in file-finding and query execution logic. It also lacks clear boundaries when processing external data files, making it susceptible to indirect prompt injection.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed