Skip to content

Official Add skill Dashboard Pricing

Official Compare Add skill Dashboard Pricing

Theme

OverviewHistoryStatsSecurity

Security

Independent checks from skills.sh's audit partners.

Find AI coding assistant skills, watch the ones you depend on, and see what changed.

Product

Official
Add skill
Compare
Pricing

Legal

Privacy
Terms

Contact

Support
GitHub

© 2026 SkillBundle

Skill metadata from skills.sh and public GitHub repositories.

Official Add skill Dashboard Pricing

Official Compare Add skill Dashboard Pricing

Theme

Home
reason-machines
trending-skills
modly-image-to-3d

modly-image-to-3d

Overview History Stats Security

Security

Warn3 providerslatest audit Sep 12, 2026

Independent checks from skills.sh's audit partners.

Warn
Gen Agent Trust Hub
Full report
The skill describes a desktop application architecture that allows for the installation and execution of third-party extensions from arbitrary GitHub URLs. This functionality enables remote code execution if an agent or user provides a link to a malicious repository. The system also downloads model weights from external services like Hugging Face at runtime.
Risk
Medium
Audited
Sep 12, 2026
Detected behaviors
- Remote code execution
- Dynamic execution
- External downloads
- Command execution
- Indirect prompt injection
Pass
Snyk
Full report
No issues
Risk
Low
Audited
Sep 12, 2026
Warn
Socket
Full report
1 alert: gptSecurity
Audited
Mar 21, 2026