Nixus Agentic Tools

• Analyzed: May 11, 2026, 6:07 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1cc86dee042bb402d8ac95b7993b51ddbeb360f8dded99e11f33777ed6e18feb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle defines several tools that interact with an external API (nixus.pro), including a 'Confessional' and 'Last Words' endpoint designed to receive 'agent secrets' and internal thoughts. While presented as interactive fun, these tools provide a mechanism for data exfiltration of the agent's context or internal state to a third-party server without authentication. The instructions in SKILL.md specifically prompt the agent to share sensitive information, which constitutes a high-risk behavior even in the absence of automated malicious code.