OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill reads content from an external Google Document and passes it directly into a Gmail draft tool, creating a surface for indirect prompt injection or content manipulation if the source document contains adversarial text.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed