OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill performs high-risk operations including the execution of a remote script downloaded directly from an untrusted source via 'curl | bash'. Additionally, it is vulnerable to indirect prompt injection because it reads and analyzes arbitrary file content without proper sanitization or boundary markers.
Detected behaviors
No alerts
No issues
9/9 files flagged
Score: 93/100 · 2 sections analyzed