OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill exhibits high-risk behavior by downloading and executing a third-party shell script directly from an untrusted GitHub repository using the 'curl | bash' pattern. Furthermore, it attempts to use 'sudo' for installation and executes commands with unsanitized arguments, creating potential for privilege escalation and command injection.
Detected behaviors
No alerts
No issues
5/5 files flagged
Score: 93/100 · 2 sections analyzed