OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates image generation via OpenRouter but contains a high-risk security pattern in its documentation, recommending piped shell execution for tool installation. It also features an arbitrary file-write capability that could be exploited to overwrite system files.
Detected behaviors
No alerts
No issues
3/3 files flagged
Score: 93/100 · 2 sections analyzed