OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Jul 11, 2026
Independent checks from skills.sh's audit partners.
The skill starts a local web dashboard to visualize project data. While functional, it lacks sanitization for the project path provided by the user, which could lead to command injection if a malicious path is used in the shell instructions.
Detected behaviors
No alerts
1 issue