OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 10, 2026
Independent checks from skills.sh's audit partners.
This skill downloads and executes an external CLI tool named 'ctx7' from the NPM registry. While it provides functionality for documentation lookup, the use of an unverified third-party package for remote code execution and the handling of API keys introduces potential security risks.
Detected behaviors
No alerts
No issues
1 file scanned · No issues