OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Jun 15, 2026
Independent checks from skills.sh's audit partners.
The skill allows users to generate images via OpenAI or Google Gemini. It includes an onboarding process that requests API keys and persists them by modifying shell profile files (like .bashrc or .zshrc). While this facilitates setup, modifying startup scripts is a persistence mechanism that requires caution.
Detected behaviors
No alerts
1 issue