OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Aug 17, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates decision-making by interviewing the user and recording the results to a specified repository. It uses an environment variable for the repository URL, which is a safe practice for managing dynamic endpoints. However, it is vulnerable to indirect prompt injection because it processes instructions and preference data from external repository files without explicit sanitization or boundary markers.
Detected behaviors
1 alert: gptAnomaly
2 issues