OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill is vulnerable to command injection because it directly interpolates user-provided text into shell commands. This could allow an attacker to execute unauthorized commands or exfiltrate sensitive data from the agent's environment.
Detected behaviors
No alerts
No issues
1/5 files flagged