OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The 'napkin' skill provides a visual whiteboard for Copilot CLI. It operates by opening a local HTML file and interpreting user sketches via screenshots and clipboard data. The primary security considerations include the use of system commands to access the clipboard and the potential for indirect prompt injection from content drawn or written on the whiteboard.
Detected behaviors
No alerts
No issues
1/2 files flagged
1 finding · Score: 86/100