OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill allows the agent to look up API documentation by reading local files in the node_modules directory using standard bash commands. No major security risks were found, though it does expose a small surface for command execution and indirect prompt injection from local dependencies.
Detected behaviors
No alerts
No issues