read — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  The skill is a comprehensive utility for fetching, reading, and summarizing web content and PDF documents. It supports specialized platforms like WeChat and Feishu/Lark via dedicated extraction scripts and utilizes external proxy services to handle complex or JS-heavy sites. The skill implements strong defensive measures against indirect prompt injection by instructing the agent to treat fetched data as untrusted and to specifically ignore embedded instructions within processed documents.

  Risk: SAFEMay 29, 2026Full report

• Socket

  pass

  No alerts

  May 29, 2026Full report

• Snyk

  fail

  Risk: CRITICAL · 2 issues

  Risk: CRITICALMay 29, 2026Full report

• ZeroLeaks

  pass

  Score: 93/100 · 2 sections analyzed

  Risk: NONEApr 16, 2026Full report