OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Jun 7, 2026
Independent checks from skills.sh's audit partners.
The skill provides OCR services for PDFs and images using several local and cloud engines. It includes a feature to automatically install missing Python dependencies at runtime using shell commands, which modifies the system environment. Additionally, it processes external file content, which presents a surface for indirect prompt injection where malicious instructions hidden in documents could influence the agent.
Detected behaviors
No alerts
1 issue
1/12 files flagged