OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill performs dynamic package installation and loading at runtime, which is a potential security risk. It also lacks sanitization when processing user-provided diagram code, creating a surface for indirect injection if malicious diagrams are rendered and opened in a browser.
Detected behaviors
No alerts
No issues
4 files scanned · No issues
Score: 93/100 · 2 sections analyzed