admapix
Security checks across malware telemetry and agentic risk
Overview
The skill's behavior (calls to api.admapix.com using an API key) matches its stated purpose, but there's an inconsistency in the declared credentials metadata which needs clarification before installing.
This skill appears to do what it says (query AdMapix endpoints), but the manifest has an inconsistency: SKILL.md expects an environment variable SKILLBOSS_API_KEY while the top-level registry entry lists no required credentials. Before installing: 1) Ask the publisher to confirm the required env var and why the registry metadata omits it. 2) If you proceed, provide a scoped API key (least privilege) and avoid using high-privilege or shared secrets. 3) Verify the platform stores the API key securely (not logged). 4) Because the skill runs shell checks and issues outbound HTTP calls, consider testing it in a limited/sandbox environment first. If you cannot confirm the metadata discrepancy or publisher identity, treat the skill with caution.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings
