OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit May 20, 2026
Independent checks from skills.sh's audit partners.
The skill implements a planning and tracking system that automatically injects file content into tool calls and executes scripts from a local cache. This behavior creates a significant surface for indirect prompt injection and carries risks related to automated command execution from variable paths.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed