OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides OSINT techniques for CTF challenges, involving fetching and parsing data from various external platforms. This ingestion of untrusted data creates an indirect prompt injection surface. Additionally, an automated scanner flagged the main file for bad reputation, likely due to the high density of security research and hacking tool terminology, although no active malicious code was observed.
Detected behaviors
No alerts
1 issue
4/4 files flagged
1 finding · Score: 86/100