Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Pyx Scan
v1.1.0Check whether an AI agent skill is safe before installing or using it. Calls the PYX Scanner API to retrieve trust status, risk score, and safety recommendat...
⭐ 4· 760·0 current·0 all-time
byOpenclaw enthusiast@fysoul17
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description match its behavior: it queries an external PYX Scanner API for a skill's safety data and formats the response. It does not request unrelated credentials, binaries, or system access.
Instruction Scope
Runtime instructions stay within the stated purpose (call the remote scanner and produce a formatted report). Minor inconsistency: Step 2's WebFetch prompt asks for the raw JSON 'exactly as-is', while Behavioral Rule #5 requires formatted markdown rather than raw JSON. This is explainable (fetch raw JSON, then format it locally) but worth noting. The skill does not instruct the agent to read local files or environment variables nor to transmit anything beyond the API request for owner/name.
Install Mechanism
No install spec and no code files — instruction-only skill. This is lowest-risk from an install perspective.
Credentials
No environment variables, credentials, or config paths are requested. The single external dependency is the PYX Scanner API endpoint, which is proportional to the claimed purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent privileges. It does not modify other skills' configs or require ongoing presence.
Assessment
This skill simply asks the PYX Scanner service (https://scanner.pyxmate.com) about a skill identified as owner/name and formats the returned report. Before installing or relying on this skill, consider: 1) Do you trust the external PYX Scanner service and its privacy practices? The skill will make outbound requests to that domain for every check. 2) Avoid using it to scan private/internal skills if you don't want to share their owner/name with an external service. 3) The runtime has permission to run curl/WebFetch — if you prefer tighter controls, restrict network access or require explicit user confirmation before each check. 4) If the scanner returns UNSCANNED, CAUTION, or FAILED, follow your normal manual review processes (review source code, audit permissions) rather than relying solely on the automated verdict. The minor instruction inconsistency (fetch raw JSON vs. 'no raw JSON' reporting rule) is benign but you may want the skill author to clarify that the agent should fetch JSON then format it for users.Like a lobster shell, security has layers — review code before you run it.
latestvk9793ybfxnbb2rgsvkt9tkvzn58155ma
License
MIT-0
Free to use, modify, and redistribute. No attribution required.