Security audit

zx

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only zx shell-scripting skill that describes powerful command-execution features, but the behavior is coherent with its stated purpose and not hidden or automatic.

Reasonable to install if you want zx scripting help. Before running commands copied from the skill, review them like shell scripts, avoid untrusted remote URLs or Markdown files, pin versions where possible, and be cautious with auto-install and custom registry options.

SkillSpector

By NVIDIA

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill explicitly states it triggers for 'executing remote scripts' but provides no safety guidance about provenance verification, transport security, integrity checking, or sandboxing. In a shell-scripting skill, normalizing remote script execution without warnings can lead users to run attacker-controlled code directly on their systems.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: This documentation explicitly states that zx will interpret and run JavaScript and shell code blocks from Markdown files, but it does not prominently warn that executing a Markdown document can run embedded commands. Because Markdown is often perceived as passive documentation, users may execute untrusted or insufficiently reviewed `.md` files and trigger arbitrary local command execution.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.