OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit May 24, 2026
Independent checks from skills.sh's audit partners.
The skill is functional for performing deep research but contains a security risk where user-provided text is directly inserted into shell commands, potentially allowing for command or argument injection. It also processes external web content which presents a minor surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue
1/1 file flagged
1 finding · Score: 82/100