OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 19, 2026
Independent checks from skills.sh's audit partners.
The skill automates CLI regeneration but contains a risk where data from potentially untrusted research files is executed in a Python subprocess without proper sanitization. This could allow a malicious CLI registry entry to execute arbitrary code. It also ingests external data into prompts for other tools without strict validation.
Detected behaviors
No alerts
1 issue