OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill performs local searches over data files inside specific workspace paths (`.fpf/`). It has potential exposure to indirect prompt injection because it searches and displays content from arbitrary files in those directories which could be user-controlled or populated from untrusted sources, but contains no active dangerous code execution.
Detected behaviors
No alerts
No issues