OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Apr 18, 2026
Independent checks from skills.sh's audit partners.
The skill installs a third-party CLI tool to manage agent skills from an external registry. This process involves downloading code and uploading local data, which introduces a surface for indirect instructions and potential exposure of sensitive local files.
Detected behaviors
No alerts
2 issues