OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 27, 2026
Independent checks from skills.sh's audit partners.
The skill converts local documents to markdown using the Firecrawl CLI. It is susceptible to indirect prompt injection if the processed files contain malicious instructions, and it uses npx to run the vendor's command-line tool.
Detected behaviors
No alerts
No issues