OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill is an orchestrator for WPS Office applications that manages cross-application workflows. While it does not contain malicious code, it possesses an indirect prompt injection surface because it ingests untrusted content from Word, Excel, and PPT documents and uses that data to drive powerful local application tools without explicit sanitization instructions.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed