OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit May 31, 2026
Independent checks from skills.sh's audit partners.
The skill provides development instructions and utility scripts for the HeroUI Native library. It contains a high-risk installation command that pipes a remote script from the vendor's domain directly into bash for execution. Additionally, it includes Node.js scripts that perform network requests to external vendor-controlled APIs to fetch documentation and theme configuration at runtime.
Detected behaviors
No alerts
2 issues
6 files scanned · No issues
1 finding · Score: 82/100