OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides tools for managing Java Maven projects. While no malicious code was found, it possesses capabilities to execute shell commands and modify files. It is vulnerable to indirect prompt injection if used on untrusted Maven projects containing malicious plugins.
Detected behaviors
No alerts
No issues
7/7 files flagged
Score: 93/100 · 2 sections analyzed