OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Aug 3, 2026
Independent checks from skills.sh's audit partners.
The higgsfield-brandkit skill is safe and implements several security best practices. It manages the creation and application of brand assets through a combination of official vendor CLI tools and local system utilities. Security-sensitive operations, such as fetching remote SVGs and executing system commands, are protected by robust hostname validation and safe argument passing. The skill's use of external scripts for CLI installation and document processing is consistent with its intended functionality and originates from trusted vendor sources.
1 alert: gptAnomaly
3 issues