OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is well-structured and includes human-in-the-loop confirmations for data storage. However, it is susceptible to indirect prompt injection because it processes untrusted user input ($ARGUMENTS) without boundary markers and uses tools to modify persistent memory.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed