OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Sep 2, 2026
Independent checks from skills.sh's audit partners.
This skill provides an interface for web searching and content extraction using the Tavily and Exa services via the inference.sh CLI. While it is functional and uses restricted tool permissions, it introduces a surface for indirect prompt injection by processing untrusted data from the web and passing it to an LLM.
Detected behaviors
1 alert: gptAnomaly
1 issue