OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Sep 12, 2026
Independent checks from skills.sh's audit partners.
The skill instructs the user to execute shell scripts directly from an untrusted GitHub repository using dangerous patterns like 'curl | bash' and 'iex', which allows for arbitrary code execution. It also requires administrative privileges (sudo) and reads sensitive API credentials from local configuration files.
Detected behaviors
1 issue
1 alert: gptSecurity