Security audit
Pipeworx nominatim
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward geocoding integration that sends address or coordinate queries to a Pipeworx-hosted Nominatim endpoint, with no hidden files or credential requests found.
Before installing, consider that addresses and coordinates can be sensitive and will be sent to Pipeworx's gateway. Use the npx mcp-remote setup only if you trust that npm package and the remote endpoint.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.