requesthunt — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  fail

  The skill provides tools for user demand research by scraping social platforms but contains security risks including a remote script installation pattern, potential command injection from unsanitized user inputs, and an indirect prompt injection surface from processed external data.

  Risk: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTIONApr 21, 2026Full report

• Socket

  pass

  No alerts

  Apr 21, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · 2 issues

  Risk: MEDIUMApr 21, 2026Full report

• Runlayer

  warn

  9/9 files flagged

  Risk: MEDIUMFeb 21, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 82/100

  Risk: LOWApr 16, 2026Full report