OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill performs content extraction from arbitrary URLs, which introduces a potential for indirect prompt injection attacks where malicious web content could influence agent behavior. It also processes user-provided input directly into a shell command for the parallel-cli tool.
Detected behaviors
No alerts
2 issues
1/1 file flagged
1 finding · Score: 82/100