← back to ivx-om-media-use

Skill Scanner · ivx-om-media-use

independent scanner by Cisco AI Defense · skill by intelli-verse-x · how it works ↗

FAILmax severity: CRITICAL

Hidden data file detected; Skill does not specify a license; Dangerous data flow in command pipeline; +2 more

scanned 2026-08-22

Findings (13)

LOWobfuscation

Hidden data file detected

.ivx-source.txt

INFOpolicy_violation

Skill does not specify a license

SKILL.md

LOWcommand_injection

Dangerous data flow in command pipeline

SKILL.md:1

MEDIUMdata_exfiltration

Outbound network request primitives in JavaScript/TypeScript

scripts\lib\freeze.mjs:9

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:55

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:127

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:147

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:148

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:165

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:179

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:186

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:196

CRITICALcommand_injection

Node.js child_process module usage for shell command execution

scripts\resolve.test.mjs:219

What the verdicts mean

Skill Scanner reports on SkillMD's shared five-tier scale. See how Skill Scanner works ↗.

PASS

Reported as safe — no findings

CAUTION

Findings up to MEDIUM severity

WARNING

Findings of HIGH severity

FAILthis skill

Findings of CRITICAL severity

INCONCLUSIVE

Scan could not complete