Security audit
Pipeworx iconify
Security checks across malware telemetry and agentic risk
Overview
This skill is a simple icon-search integration that sends user-requested icon queries to Pipeworx/Iconify and does not ask for credentials or persistent access.
Install this if you are comfortable sending icon search terms and requested icon names to gateway.pipeworx.io. If you use the optional MCP configuration, it will run mcp-remote from npm, so consider that dependency separately from the markdown-only skill.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.