OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill provides a detailed evaluation methodology for AI plugins, including scoring rubrics and CLI usage examples. No malicious code, data exfiltration, or persistence mechanisms were detected. The skill is rated as low severity because it establishes an attack surface for indirect prompt injection by processing external plugin files without mandating sanitization or boundary markers.
Detected behaviors
No alerts
No issues
Score: 93/100 · 2 sections analyzed