OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Apr 21, 2026
Independent checks from skills.sh's audit partners.
This skill acts as a thin wrapper for an external legal document generator. It downloads an external repository from GitHub using a pinned commit SHA and instructs the agent to execute the installation and rendering logic contained within that repository. While the use of a pinned SHA mitigates the risk of supply chain attacks, the external source is not pre-verified as a trusted vendor.
Detected behaviors
No alerts
2 issues