OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 30, 2026
Independent checks from skills.sh's audit partners.
The skill includes a utility script that modifies sensitive user shell configuration files and agent settings. It also processes untrusted external content from YouTube, which presents a surface for indirect prompt injection.
Detected behaviors
No alerts
1 issue
2/2 files flagged
Score: 93/100 · 2 sections analyzed