OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides guidance for the torchforge RL library but includes security concerns related to unverified external resources and potential indirect prompt injection. It instructs users to execute unverified installation scripts and download code from a non-standard domain and GitHub organization. The ingestion of external datasets and configurations also creates a surface for indirect instructions to influence agent behavior.
Detected behaviors
No alerts
1 issue
Score: 93/100 · 2 sections analyzed