Threat Research
Skill Risk Index
Real security scans of the most popular AI agent skills.
Available for these agents| Skill | Stars | Findings | Risk |
|---|---|---|---|
| textme github/sickn33 This skill executes remote code during use and sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 43.8k | 3 | High |
| boss-cli github/jackwener This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 842 | 3 | High |
| docx-official github/sickn33 Automated analysis flagged 3 potential risk patterns. | 43.8k | 3 | Medium |
| devops-deploy github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| huggingface-tool-builder github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| youtube-transcript github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| sales-ahrefs github/sales-skills This skill sends sensitive values to an external host. | 89 | 1 | Medium |
| sales-referlist github/sales-skills This skill sends sensitive values to an external host. | 89 | 1 | Medium |
| sales-sellfy github/sales-skills This skill sends sensitive values to an external host. | 89 | 1 | Medium |
| ai-studio-image github/sickn33 This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 43.8k | 2 | Medium |
| akf-trust-metadata github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| antigravity-maintainer-batch-release github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| audio-transcriber github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| comfyui-gateway github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| ejentum-reasoning-harness github/sickn33 This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 43.8k | 2 | Medium |
| google-sheets-automation github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| last30days github/sickn33 This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 43.8k | 2 | Medium |
| macos-spm-app-packaging github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| seo-dataforseo github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| skill-creator github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| skill-installer github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| vibers-code-review github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| vps-server-management github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| web-artifacts-builder github/sickn33 Automated analysis flagged 2 potential risk patterns. | 43.8k | 2 | Medium |
| eval-driven-dev github/github Automated analysis flagged 2 potential risk patterns. | 37k | 2 | Medium |
| latchshot-page-capture github/github This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 37k | 2 | Medium |
| publish-to-pages github/github Automated analysis flagged 2 potential risk patterns. | 37k | 2 | Medium |
| sandbox-npm-install github/github Automated analysis flagged 2 potential risk patterns. | 37k | 2 | Medium |
| skill-installer github/composio-community This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 15.3k | 2 | Medium |
| setup github/tetherto Automated analysis flagged 2 potential risk patterns. | 321 | 2 | Medium |
| autoresearch github/theneoai Automated analysis flagged 2 potential risk patterns. | 118 | 2 | Medium |
| sales-catchintent github/sales-skills This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 89 | 2 | Medium |
| sales-fourfour github/sales-skills This skill contains obfuscated or hidden content. Automated analysis flagged 1 additional risk pattern. | 89 | 2 | Medium |
| sales-linkedhelper github/sales-skills This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 89 | 2 | Medium |
| sales-nexter github/sales-skills This skill contains obfuscated or hidden content. Automated analysis flagged 1 additional risk pattern. | 89 | 2 | Medium |
| sales-pickfu github/sales-skills This skill sends sensitive values to an external host. Automated analysis flagged 1 additional risk pattern. | 89 | 2 | Medium |
| formula-fields github/pranavnagrecha Automated analysis flagged 2 potential risk patterns. | 8 | 2 | Medium |
| lead-management-and-conversion github/pranavnagrecha Automated analysis flagged 2 potential risk patterns. | 8 | 2 | Medium |
| flow-for-slack github/pranavnagrecha Automated analysis flagged 2 potential risk patterns. | 8 | 2 | Medium |
| pptx-official github/sickn33 Automated analysis flagged 3 potential risk patterns. | 43.8k | 3 | Medium |
| android-cli github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| aomi-transact github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| api-sdk-generator github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| appdeploy github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| aws-cost-cleanup github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| browser-harness github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| discord-automation github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| frontend-slides github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| gh-image github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| github-workflow-automation github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| gmail-automation github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| google-docs-automation github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| google-drive-automation github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| hasdata-cli github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| hugging-face-cli github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| linear-claude-skill github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| pptx-deck-creation github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| run-deep-swe github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| security-scanning-security-dependencies github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| seo-image-gen github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| slack-automation github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| survey-generator github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| user-thoughts github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| viboscope github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| videodb-skills github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| weaviate github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Medium |
| sendblue-cli github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Medium |
| agent-skill-stack github/github Automated analysis flagged 1 potential risk pattern. | 37k | 1 | Medium |
| autoresearch github/github Automated analysis flagged 1 potential risk pattern. | 37k | 1 | Medium |
| nano-banana-pro-openrouter github/github This skill sends sensitive values to an external host. | 37k | 1 | Medium |
| facebook-automation github/composio-community This skill sends sensitive values to an external host. | 15.3k | 1 | Medium |
| gsd-review github/open-gsd This skill sends sensitive values to an external host. | 7.1k | 1 | Medium |
| sales-callminer github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-constantcontact github/sales-skills This skill contains prompt-injection style instructions. | 89 | 1 | Medium |
| sales-getaccept github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-ideagrape github/sales-skills This skill sends sensitive values to an external host. | 89 | 1 | Medium |
| sales-inbox-zero github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-jeeng github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-meltwater github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-mulesoft github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-omnisend github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-request-skill github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-salesmate github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-sender github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-siro github/sales-skills Automated analysis flagged 1 potential risk pattern. | 89 | 1 | Medium |
| sales-texau github/sales-skills This skill sends sensitive values to an external host. | 89 | 1 | Medium |
| sales-waalaxy github/sales-skills This skill sends sensitive values to an external host. | 89 | 1 | Medium |
| integration-admin-connected-apps github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| products-and-pricebooks github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| data-cloud-data-model-objects github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| flow-record-locking-and-contention github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| subflows-and-reusability github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| data-cloud-activation-development github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| data-cloud-query-api github/pranavnagrecha This skill sends sensitive values to an external host. | 8 | 1 | Medium |
| slack-salesforce-integration-setup github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| streaming-api-and-pushtopic github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| tableau-salesforce-connector github/pranavnagrecha Automated analysis flagged 1 potential risk pattern. | 8 | 1 | Medium |
| adspy-analytics-intelligence github/aradotso This skill sends sensitive values to an external host. | 2 | 1 | Medium |
| active-directory-attacks github/sickn33 Automated analysis flagged 1 potential risk pattern. | 43.8k | 1 | Low |
| aws-penetration-testing github/sickn33 This skill sends sensitive values to an external host. | 43.8k | 1 | Low |
Showing 100 of 8411 skills - scroll for more.
No skills match your filters.
Assessed by the Anomity Skill Intelligence engine. Findings indicate risk patterns, not confirmed exploitation. Maintainers can request a review or rescan. Machine-readable feed: feed.json - free with attribution, see the data terms. Plain-HTML listing of every skill: full skill directory.
Show you check your skills
Scanning your agent skills with Anomity? Add the badge to your README.
Skills are only half the picture
Scan-time vetting catches risky skills before install. Anomity governs what agents actually do at runtime: full visibility and enforcement across every AI agent and MCP. Book a 30-minute demo.
