OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Feb 27, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates image generation and presentations but introduces high-level security risks. It recommends downloading and executing standalone binaries from an untrusted GitHub repository (Factory-AI) and requires the installation of third-party NPM packages from untrusted organizations. Additionally, the presentation tool (Slidev) supports dynamic code execution, which could be exploited if malicious content is processed.
Detected behaviors
No alerts
No issues
1/4 files flagged