OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Apr 18, 2026
Independent checks from skills.sh's audit partners.
This skill installs a third-party command-line tool from an unverified GitHub repository to manage Things 3 on macOS. It requires high-privilege permissions (Full Disk Access) to read the local database and handles authentication tokens in a way that may expose them in process lists, while also presenting an indirect prompt injection surface through task content.
Detected behaviors
No alerts
1 issue