OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill allows searching patent databases via the Valyu API. It presents medium security risks primarily due to the exposure of API keys in command-line arguments and the use of dynamic path resolution for executing scripts. It also has an attack surface for indirect prompt injection via retrieved patent text.
Detected behaviors
No alerts
No issues
2/3 files flagged
1 finding · Score: 82/100