OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates interaction with the PCKLE knowledge platform via a CLI tool. It contains a high-risk troubleshooting instruction that suggests piping a remote script from a variable host directly into a shell ('curl | sh'), which is a common vector for remote code execution. Furthermore, the CLI's capability to read local files and upload them to a remote API as 'setup scripts' or 'instructions' presents a significant risk for data exposure.
Detected behaviors
No alerts
2 issues
1/2 files flagged