OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Mar 22, 2026
Independent checks from skills.sh's audit partners.
The skill implements a structured workflow using local markdown files for persistent task tracking and research notes. While primarily organizational, it introduces an indirect prompt injection surface by reading back research data that might contain untrusted content from external sources. Additionally, the skill enables the Bash tool, which provides the agent with significant command execution capabilities.
Detected behaviors
No alerts
No issues
2 files scanned · No issues