Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides a specialized environment for embedded systems engineering, featuring code templates for STM32, FreeRTOS, and peripheral drivers. It includes an external reference to documentation on a non-whitelisted domain that has been flagged as blacklisted by automated security scans. While the C code appears legitimate for firmware development, the low-level hardware access patterns may have triggered malware reputation alerts. The skill also presents an attack surface for indirect prompt injection via user-supplied requirements.
Detected behaviors
No alerts
No issues
2/6 files flagged
Score: 93/100 · 2 sections analyzed