.fyi
SkillsMCPPluginsSubagents

Browse by category

DevOps & CI/CD SkillsProductivity & Workflow SkillsOther SkillsProduct & Project Management SkillsDocumentation & Knowledge SkillsCode Review & Refactor SkillsBackend & APIs SkillsAgent Meta & Communication SkillsResearch SkillsSecurity SkillsUX UI & Design SkillsTesting & QA SkillsSee all →

Every Claude Code skill, MCP server, plugin and subagent in one directory. Searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

We're on Product HuntYour agent's app storeCheck it out →
Agent SkillsMCP ServersPluginsSubagentsCoding Agents
CollectionsOfficial publishersGlossaryFAQBlogSearchSavedFeedback
PrivacyTermsllms.txtSitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

…/story-cover/security
home/skills/story-cover/security
worldwonderer avatar

story-cover — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

  • Gen Agent Trust Hub

    warn

    This skill provides a professional workflow for generating novel covers using an image generation API. However, it contains shell command templates that lack input sanitization, potentially allowing malicious book titles or author names to trigger command injection. It also relies on external network access to process user-provided data and API keys.

    Risk: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONMay 12, 2026Full report
  • Socket

    pass

    No alerts

    May 12, 2026Full report
  • Snyk

    warn

    Risk: MEDIUM · 1 issue

    Risk: MEDIUMMay 12, 2026Full report