OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill parses local Terraform files and transmits infrastructure metadata to an external API (Eraser). It is highly vulnerable to Indirect Prompt Injection because it processes untrusted infrastructure code and executes network commands without sanitization or boundary markers, allowing malicious instructions within files to potentially hijack the agent.
Detected behaviors
1 alert: gptAnomaly
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed