OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill modifies the global system environment by installing an external npm package and executes code through dynamic imports. While the data sources for K League results are official, the practice of runtime package installation and dynamic loading from computed paths represents a security risk and potential supply-chain vulnerability.
Detected behaviors
No alerts
1 issue
Score: 93/100 · 2 sections analyzed