OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill attempts to download and execute a script from a URL flagged as malicious (Botnet) directly into the system shell via a piped bash command, posing a severe security risk.
Detected behaviors
No alerts
No issues
1/1 file flagged
1 finding · Score: 82/100