OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill extracts web content via Tavily's API and handles authentication by scanning the user's global MCP auth directory for credentials. It also dynamically downloads and executes the 'mcp-remote' package using npx to facilitate OAuth authentication.
Detected behaviors
No alerts
No issues
1/2 files flagged