OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill uses non-standard character substitution, replacing forward slashes with dollar signs to obfuscate URLs, package import paths, and file paths. It also includes instructions for using sudo to modify firewall settings and processes external data, which introduces a surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue
1/1 file flagged
Score: 93/100 · 2 sections analyzed