OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Aug 19, 2026
Independent checks from skills.sh's audit partners.
The skill installs third-party software from an unverified GitHub repository and recommends high-risk remote code execution patterns, such as piping a web-hosted script directly into a Python interpreter. These practices introduce significant supply chain risks by executing unverified code from an external, non-vendor source.
Detected behaviors
2 alerts: gptSecurity, gptAnomaly
3 issues