OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 28, 2026
Independent checks from skills.sh's audit partners.
The skill establishes a QA and evaluation pipeline by installing the third-party 'pixie-qa' package and executing shell scripts to manage the environment. It captures application data (including inputs, outputs, and internal states) and runs a background web server to display results. Security risks include the automated installation of external dependencies from non-trusted repositories and the runtime execution of local project code within a test harness.
Detected behaviors
No alerts
No issues
1/2 files flagged
Score: 93/100 · 2 sections analyzed