OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 12, 2026
Independent checks from skills.sh's audit partners.
The skill is vulnerable to command and argument injection because it directly interpolates user-provided arguments into shell commands that execute automatically when the skill is loaded. This could allow for arbitrary code execution or unauthorized access to sensitive files on the host system.
Detected behaviors
No alerts
No issues