OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill manages user authentication and account operations for the Flow Nexus platform. While functionally legitimate, it processes untrusted user inputs (credentials and tokens) which introduces a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
1/1 file flagged
1 finding · Score: 82/100