OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 8, 2026
Independent checks from skills.sh's audit partners.
The skill is a discovery stub that instructs the agent to dynamically load its full operational guide from a local command-line tool (orca). While this ensures version-matched instructions, it introduces an indirect prompt injection surface where the agent processes instructions generated by an external process.
Detected behaviors
No alerts
No issues