OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit May 13, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates reading Twitter/X content for financial research by utilizing the third-party 'opencli' tool. It presents an indirect prompt injection risk by ingesting untrusted data from social media and uses dynamic context injection to check tool status at load time. Users are required to install external dependencies, including a Node.js package and a Chrome extension from a non-vendor source.
Detected behaviors
1 alert: gptAnomaly
1 issue
Score: 93/100 · 2 sections analyzed