OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Apr 25, 2026
Independent checks from skills.sh's audit partners.
The skill provides comprehensive instructions for auditing Model Context Protocol (MCP) servers. While the skill itself is purely instructional and contains no malicious code, it describes a workflow that involves reading and executing tests from external repositories, which introduces a risk of indirect prompt injection and the execution of untrusted code from the repositories being audited.
Detected behaviors
No alerts
No issues