OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
This skill acts as a manager for the PostHog Skills Store, allowing the agent to discover, load, and execute shared workflows and scripts. While it serves a legitimate utility for team collaboration, it creates a surface for indirect prompt injection because it integrates external, potentially untrusted instructions and scripts into the agent's execution environment.
Detected behaviors
1 alert: gptAnomaly
1 issue