OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit May 14, 2026
Independent checks from skills.sh's audit partners.
The skill resolves file system paths from user-provided input and incorporates them into shell commands. This pattern presents a risk of command injection if shell metacharacters are included in the input. Additionally, the setup script may prioritize local binaries found in the current workspace, which could lead to the execution of untrusted code if the workspace is compromised.
Detected behaviors
No alerts
No issues