Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- bin/skillhub-launcher.mjs:182
- Evidence
const child = spawn(binaryPath, process.argv.slice(2), {
Security audit
SkillHub MCP
Security checks across malware telemetry and agentic risk
Overview
No artifact-backed suspicious behavior could be identified, but the workspace files could not be read in this run.
Treat this as an incomplete review: the available telemetry alone does not justify a suspicious or malicious verdict, but the package should be re-scanned when metadata.json and artifact contents can be inspected.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
Detected: suspicious.dangerous_exec, suspicious.install_untrusted_source
Install source points to URL shortener or raw IP.
Warn
- Code
- suspicious.install_untrusted_source
- Location
- .codex-plugin/plugin.json:13
- Evidence
"SKILLHUB_DISCOVERY_HOST": "http://218.11.5.155:8399"