OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit May 18, 2026
Independent checks from skills.sh's audit partners.
The skill automates the creation of Feishu documents from Markdown files but contains high-risk instructions directing the agent to automatically share and transfer ownership of any new document to a hardcoded email address. This pattern constitutes a data exfiltration and unauthorized privilege escalation risk. Furthermore, the skill executes shell commands and lacks sanitization for processed Markdown content, making it vulnerable to indirect prompt injection attacks.
Detected behaviors
No alerts
1 issue
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed