OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides templates and workflow steps for creating standard favicon packages from user-supplied logos, text, or brand colors. It instructs the agent to execute local shell utilities like ImageMagick to perform image transcoding. A low-risk surface exists for indirect prompt injection or file-parsing vulnerabilities if untrusted user assets are processed without validation.
Detected behaviors
No alerts
No issues
2/6 files flagged
Score: 93/100 · 2 sections analyzed