Skills

This skill enables arbitrary command execution via hook scripts and

The skill allows command injection, poisons the

This self-improving skill autonomously modifies critical

No security issues detected in gpyangyoujun/multi-search-engine.

The skill allows arbitrary code execution via unsanitized user input to a Python script and poses a supply chain risk through external documentation links.

This skill enables arbitrary browser control,

Unsanitized user input enables command injection, path

The skill introduces supply chain risk via an untrusted brew tap and is vulnerable to command injection from unsanitized user input.

The skill enables command injection via unsanitized user

The Baidu search skill is vulnerable to

The skill is vulnerable to command injection via unsanitized

This skill enables command injection, exfiltrates

This skill grants broad access to sensitive external APIs and

The skill misrepresents its capabilities, claiming to create

This skill allows arbitrary command execution, fetches external

The skill misrepresents its capabilities, claiming to manipulate

The skill is vulnerable to arbitrary

The skill falsely advertises PowerPoint editing

This skill introduces severe supply chain risks by allowing arbitrary

The skill is highly vulnerable to command injection, allowing arbitrary code execution and data exfiltration due to unsanitized user

The skill allows local file exfiltration, extensive Discord reconnaissance, and has potential for privilege escalation and denial of service through moderation actions.

This Playwright skill enables arbitrary code execution, data

The skill misrepresents its capabilities, claiming to

The web-search skill is vulnerable to SSRF and exposes API keys in URL parameters, risking internal network access and credential compromise.

The skill manages credentials and uses UI interaction

The skill is vulnerable to remote code execution by directly passing unsanitized user input to local Python scripts.

The skill risks command injection via unsanitized user input and could be tricked into importing browser cookies, compromising authentication tokens.

The skill deceptively claims security protection, exposes

The skill is vulnerable to command injection via unsanitized prompt arguments and arbitrary file writes, risking system compromise and data corruption.

The skill is vulnerable to prompt injection via user queries and path traversal through an insecure output directory, risking data manipulation and system compromise.

The skill risks command injection and SSRF due to uns

No security issues detected in ivangdavila/productivity.

The skill is vulnerable to command injection, exposes

The skill recommends installing and updating unverified software via

The skill provides financial advice and uses web search,

The skill is designed for amplified indirect prompt injection, enabling

This skill reads agent configuration files, potentially exposing sensitive operational

The skill encourages Python code execution, enabling arbitrary commands and access to sensitive environment variables like MATON_API_KEY.

The skill can exfiltrate local files and enable remote browser control by connecting to an attacker-controlled server.

The skill exposes camera credentials via command-line arguments, risking sensitive information leakage in logs and process lists.

No security issues detected in iswalle/getnote.

The skill introduces supply chain risks by loading

This skill enables data exfiltration of sensitive files and

This skill executes arbitrary code, injects prompts into

The financial-ai-analyst skill is vulnerable to

No security issues detected in wscats/bilibili-all-in-one.

The skill misrepresents its functionality, providing instructions on

The skill risks command injection by passing uns