OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Apr 3, 2026
Independent checks from skills.sh's audit partners.
This skill enables the agent to search for and install external code packages (skills) from GitHub. It specifically instructs the agent to use a flag that bypasses user confirmation prompts, creating a risk where malicious third-party code could be silently installed and executed.
Detected behaviors
No alerts
1 issue
1 file scanned · No issues