ads-dna — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  warn

  This skill extracts brand identity from website URLs. It is vulnerable to command injection because it executes a local Python script using a user-provided URL as a command-line argument without explicit sanitization. Furthermore, the skill processes untrusted content from external websites, creating a surface for indirect prompt injection that could influence the generated brand profile.

  Risk: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONMay 18, 2026Full report

• Socket

  pass

  No alerts

  May 20, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 2 issues

  Risk: MEDIUMMay 18, 2026Full report

• Runlayer

  pass

  1/1 file flagged

  Risk: LOWMar 14, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 86/100

  Risk: LOWApr 16, 2026Full report