OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Aug 8, 2026
Independent checks from skills.sh's audit partners.
The skill provides a framework for building AI agents using the OpenRouter SDK. It includes a calculator tool that uses the JavaScript `Function` constructor to evaluate mathematical expressions. While it attempts to sanitize inputs using a restrictive regular expression, the use of dynamic code execution presents a potential security risk if the sanitization is bypassed.
Detected behaviors
No alerts
1 issue