OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Apr 25, 2026
Independent checks from skills.sh's audit partners.
The skill accesses sensitive AWS credential files and executes or installs a binary from an unverified third-party repository. It also exhibits command injection risks through unvalidated placeholders in shell scripts and is vulnerable to indirect prompt injection when analyzing external files.
Detected behaviors
No alerts
1 issue
4/5 files flagged