OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Aug 4, 2026
Independent checks from skills.sh's audit partners.
The skill provides guidance on using Expo DOM components but includes a command to execute an unverified NPM package, creating a supply chain risk. It also demonstrates a webview-to-native bridge that lacks input sanitization, potentially allowing for indirect prompt injection.
Detected behaviors
No alerts
No issues