Security audit
Pipeworx books
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward book lookup skill that sends book-related requests to a Pipeworx/Open Library gateway and shows no hidden local access or persistence.
Install if you are comfortable sending book search terms, ISBNs, and author lookup requests to the Pipeworx gateway. Avoid putting sensitive personal data into searches, and review the optional npx-based MCP setup because it runs mcp-remote@latest from npm.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.