OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill interacts with Datadog using an unversioned third-party npm package via npx, which introduces external download risks and package author discrepancies. Additionally, processing raw log data from Datadog exposes the agent to potential indirect prompt injection vulnerabilities.
Detected behaviors
1 alert: gptSecurity
1 issue
7/7 files flagged
Score: 93/100 · 2 sections analyzed