Phy Cors Audit

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:25 PM UTC
• Version:
  1.0.3

Overview

The skill appears to be a security-guidance skill with one unsafe CORS example, not a hidden or malicious runtime behavior.

Install only if you are comfortable treating its output as advisory. Review any generated CORS code before using it, and ensure preflight handling uses the same explicit origin, method, header, and credentials policy as normal CORS middleware.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

Medium

• Confidence: 95% confidence
• Finding: The generated Express example presents itself as secure but then adds `app.options('*', cors())`, which can apply permissive default CORS behavior to all preflight requests independently of the origin validation logic above. That mismatch can cause developers to deploy a configuration where preflight handling is broader than the actual allowlist, undermining the skill’s security guidance.

VirusTotal

66/66 vendors flagged this skill as clean.