audit-skills
Conducts comprehensive security audits for AI skills and bundles, identifying vulnerabilities and risks across multiple platforms.
Install this skill
or
45/100
Security score
The audit-skills skill was audited on May 14, 2026 and we found 5 security issues across 4 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
critical line 80
Piping content to bash shell
SourceSKILL.md
| 80 | - **Tubes**: `curl ... | bash`, `iwr ... | iex`. |
medium line 69
Access to .env file
SourceSKILL.md
| 69 | - **Sensible Data**: `.env`, `.ssh`, `cookies.sqlite`, `Keychains` (macOS), `Credentials` (Windows), `keystore` (Android). |
high line 69
Access to system keychain/keyring
SourceSKILL.md
| 69 | - **Sensible Data**: `.env`, `.ssh`, `cookies.sqlite`, `Keychains` (macOS), `Credentials` (Windows), `keystore` (Android). |
medium line 78
Base64 decode via atob()
SourceSKILL.md
| 78 | - **Encoding**: `Base64`, `Hex`, `XOR` loops, `atob()`. |
medium line 124
Base64 decode via atob()
SourceSKILL.md
| 124 | **Solution:** Look for encoding patterns like Base64, Hex, XOR loops, and atob() |
Scanned on May 14, 2026
View Security Dashboard