Pyx Scan

Security checks across malware telemetry and agentic risk

Overview

This skill has a legitimate scanner purpose, but its curl fallback can place user-controlled skill names into a shell command without strict validation.

Review before installing. Use only ordinary owner/name identifiers, and do not pass untrusted or crafted strings to this skill. The maintainer should remove the Bash fallback or enforce a strict safe-character allowlist and URL-encode owner/name before any network call.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Confidence: 91% confidence
Finding: The skill advertises broad trigger phrases like "is this safe", "check skill", and "verify tool", which can match ordinary safety-related conversation and cause the skill to activate in contexts the user did not intend. Because this skill can make external network calls and emit authoritative safety verdicts, over-broad invocation increases the risk of accidental execution, misclassification, and undue trust in a third-party scanner.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal