OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 21, 2026
Independent checks from skills.sh's audit partners.
The skill provides tools for user demand research by scraping social platforms but contains security risks including a remote script installation pattern, potential command injection from unsanitized user inputs, and an indirect prompt injection surface from processed external data.
Detected behaviors
No alerts
2 issues
9/9 files flagged
1 finding · Score: 82/100