OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Apr 18, 2026
Independent checks from skills.sh's audit partners.
The skill includes a highly dangerous installation method that pipes a remote script from an untrusted GitHub repository directly into the system shell, enabling unverified remote code execution. It also manages sensitive user credentials for the X API, which could be compromised through this unsafe installation vector.
Detected behaviors
No alerts
2 issues