OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 6, 2026
Independent checks from skills.sh's audit partners.
The skill is a scaffolding utility for creating new AI agent skills. It uses shell commands to generate directory structures, fill templates, and install skills via symbolic links. It retrieves user identity information from git settings for metadata. A minor risk of indirect prompt injection exists due to the interpolation of unsanitized user input into generated instruction files.
Detected behaviors
No alerts
No issues
2/8 files flagged
Score: 93/100 · 2 sections analyzed