OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill performs web searches using the Tavily API but includes high-risk behaviors for authentication management. It scans the user's home directory for existing authentication tokens and uses 'npx' to download and execute an external package for OAuth without user confirmation.
Detected behaviors
No alerts
No issues
1/2 files flagged