OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides instructions for setting up Mojo and MAX development environments using managers like Pixi or uv. It includes commands that utilize elevated permissions (sudo) for system compiler installation and fetches packages from the official Modular vendor repositories. It also features a potential command injection surface where user-defined project names are used in shell commands.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed