OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill instructs the execution of a fuzzer tool whose source code (main.rs) has been flagged by automated scanners for containing a blacklisted malicious URL. Running this tool via cargo or Docker could result in the execution of malicious logic or the exfiltration of sensitive tokens like GITHUB_TOKEN and SLACK_WEBHOOK_URL.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed