skills.sh security scan results
74 skills from skills.sh scanned, 5 with at least one finding, as of 2026-10-22.
Findings by category
Highest-risk skills
- qa-test-planner ISSUES FOUND 22 findings
- session-handoff ISSUES FOUND 9 findings
- browser-use ISSUES FOUND 5 findings
- using-superpowers ISSUES FOUND 5 findings
- web-design-guidelines ISSUES FOUND 3 findings
- using-git-worktrees SAFE 6 findings
- subagent-driven-development SAFE 5 findings
- atxp SAFE 3 findings
- codex SAFE 2 findings
- dependency-updater SAFE 2 findings
All skills.sh skills
| Name | Verdict | SkillSpector | Findings | Critical | High | Medium | Low |
|---|---|---|---|---|---|---|---|
| qa-test-planner | ISSUES FOUND | Do not install 57 | 22 | 14 | 0 | 5 | 3 |
| session-handoff | ISSUES FOUND | Do not install 66 | 9 | 0 | 2 | 3 | 4 |
| browser-use | ISSUES FOUND | Caution 12 | 5 | 0 | 2 | 3 | 0 |
| using-superpowers | ISSUES FOUND | Safe 0 | 5 | 0 | 1 | 2 | 2 |
| web-design-guidelines | ISSUES FOUND | Caution 0 | 3 | 0 | 1 | 2 | 0 |
| using-git-worktrees | SAFE | Caution 11 | 6 | 0 | 0 | 2 | 4 |
| subagent-driven-development | SAFE | Caution 0 | 5 | 0 | 0 | 2 | 3 |
| atxp | SAFE | Caution 12 | 3 | 0 | 0 | 3 | 0 |
| codex | SAFE | Do not install 90 | 2 | 0 | 0 | 2 | 0 |
| dependency-updater | SAFE | Caution 27 | 2 | 0 | 0 | 2 | 0 |
| expo-cicd-workflows | SAFE | Caution 43 | 2 | 0 | 0 | 2 | 0 |
| gemini | SAFE | Do not install 54 | 2 | 0 | 0 | 2 | 0 |
| launch-strategy | SAFE | Caution 0 | 2 | 0 | 0 | 2 | 0 |
| writing-skills | SAFE | Do not install 100 | 2 | 0 | 0 | 1 | 1 |
| domain-name-brainstormer | SAFE | Safe 0 | 1 | 0 | 0 | 1 | 0 |
| marketing-psychology | SAFE | Caution 0 | 1 | 0 | 0 | 1 | 0 |
| popup-cro | SAFE | Caution 0 | 1 | 0 | 0 | 1 | 0 |
| use-dom | SAFE | Caution 0 | 2 | 0 | 0 | 0 | 2 |
| seo-audit | SAFE | Caution 0 | 1 | 0 | 0 | 0 | 1 |
| writing-clearly-and-concisely | SAFE | Safe 15 | 1 | 0 | 0 | 0 | 1 |
| writing-plans | SAFE | Caution 0 | 1 | 0 | 0 | 0 | 1 |
| ab-test-setup | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| agent-md-refactor | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| analytics-tracking | SAFE | Caution 6 | 0 | 0 | 0 | 0 | 0 |
| audit-website | SAFE | Do not install 78 | 0 | 0 | 0 | 0 | 0 |
| brainstorming | SAFE | Safe 0 | 0 | 0 | 0 | 0 | 0 |
| building-native-ui | SAFE | Caution 44 | 0 | 0 | 0 | 0 | 0 |
| commit-work | SAFE | Safe 0 | 0 | 0 | 0 | 0 | 0 |
| competitor-alternatives | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| copy-editing | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| copywriting | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| create-auth-skill | SAFE | Caution 12 | 0 | 0 | 0 | 0 | 0 |
| daily-meeting-update | SAFE | Caution 35 | 0 | 0 | 0 | 0 | 0 |
| dispatching-parallel-agents | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| email-sequence | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| expo-api-routes | SAFE | Caution 17 | 0 | 0 | 0 | 0 | 0 |
| expo-deployment | SAFE | Caution 17 | 0 | 0 | 0 | 0 | 0 |
| expo-dev-client | SAFE | Caution 10 | 0 | 0 | 0 | 0 | 0 |
| expo-tailwind-setup | SAFE | Caution 7 | 0 | 0 | 0 | 0 | 0 |
| finishing-a-development-branch | SAFE | Caution 11 | 0 | 0 | 0 | 0 | 0 |
| form-cro | SAFE | Caution 7 | 0 | 0 | 0 | 0 | 0 |
| free-tool-strategy | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| marketing-ideas | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| mermaid-diagrams | SAFE | Safe 16 | 0 | 0 | 0 | 0 | 0 |
| native-data-fetching | SAFE | Caution 36 | 0 | 0 | 0 | 0 | 0 |
| next-best-practices | SAFE | Do not install 88 | 0 | 0 | 0 | 0 | 0 |
| nuxt | SAFE | Do not install 91 | 0 | 0 | 0 | 0 | 0 |
| onboarding-cro | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| page-cro | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| paid-ads | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| paywall-upgrade-cro | SAFE | Caution 21 | 0 | 0 | 0 | 0 | 0 |
| pricing-strategy | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| programmatic-seo | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| react-native-best-practices | SAFE | Do not install 100 | 0 | 0 | 0 | 0 | 0 |
| receiving-code-review | SAFE | Safe 0 | 0 | 0 | 0 | 0 | 0 |
| referral-program | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| remotion-best-practices | SAFE | Do not install 100 | 0 | 0 | 0 | 0 | 0 |
| requesting-code-review | SAFE | Caution 7 | 0 | 0 | 0 | 0 | 0 |
| schema-markup | SAFE | Caution 16 | 0 | 0 | 0 | 0 | 0 |
| ship-learn-next | SAFE | Safe 0 | 0 | 0 | 0 | 0 | 0 |
| signup-flow-cro | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| social-content | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| supabase-postgres-best-practices | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| systematic-debugging | SAFE | Do not install 77 | 0 | 0 | 0 | 0 | 0 |
| tailwind-design-system | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| test-driven-development | SAFE | Caution 0 | 0 | 0 | 0 | 0 | 0 |
| turborepo | SAFE | Do not install 90 | 0 | 0 | 0 | 0 | 0 |
| upgrading-expo | SAFE | Caution 12 | 0 | 0 | 0 | 0 | 0 |
| vercel-composition-patterns | SAFE | Caution 20 | 0 | 0 | 0 | 0 | 0 |
| vercel-react-best-practices | SAFE | Caution 34 | 0 | 0 | 0 | 0 | 0 |
| vercel-react-native-skills | SAFE | Caution 46 | 0 | 0 | 0 | 0 | 0 |
| verification-before-completion | SAFE | Safe 11 | 0 | 0 | 0 | 0 | 0 |
| vue | SAFE | Caution 32 | 0 | 0 | 0 | 0 | 0 |
| vue-best-practices | SAFE | Do not install 100 | 0 | 0 | 0 | 0 | 0 |