OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Feb 20, 2026
Independent checks from skills.sh's audit partners.
The skill provides a suite of tools for Pinecone Assistant but contains a high-risk installation recommendation for the 'uv' package manager via a piped shell script (curl | sh). It also carries an inherent risk of indirect prompt injection due to its core function of processing and chatting with external document content.
Detected behaviors
No alerts
No issues