OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is a legitimate writing assistant for WeChat Official Accounts that uses web searches and local style configuration files to generate content. It is categorized as low risk due to an indirect prompt injection surface where the agent processes external, untrusted content from web searches without explicit boundary markers or sanitization, which could allow third-party content to influence the agent's behavior.
Detected behaviors
No alerts
1 issue
1/1 file flagged
Score: 93/100 · 2 sections analyzed