15Low
The skill lacks version pinning for dependencies, creating a supply chain risk, and contains broken documentation references and metadata non-compliance that undermine its reliability and security posture.
Skill Info
Namezw008/VMware-NSX/vmware-nsx
Registrygithub
Versiona6e254820aa7
PURLpkg:github/zw008/VMware-NSX@a6e254820aa7?skill=vmware-nsx
Stars4
Source
SHA-2563d6ef4c7ea99...
SHA-1e8ca4e9c0863...
MD5c720e225c388...
TLSH6fa2e657f654...
ssdeep384:XeZTWgJJ...
Size21,426 bytes
Install
GitHub
Skills.shDocs
npx skills add https://github.com/zw008/VMware-NSXAssessments (2)
AI Agent Traps ↗Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/agent-guardrails.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[`references/agent-guardrails.md`](references/agent-guardrails.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Compatibility field exceeds maximum lengthinfopolicy violation
Skill 'compatibility' field exceeds the Agent Skills spec limit of 500 characters.
100% confidence
Unpinned dependency installationlowsupply chainAML.T0010AML.T0019AML.T0058LLM03:2025
The installation instruction uses `uv tool install vmware-nsx-mgmt` without specifying a version pin or hash, which could lead to the installation of compromised code if the package registry is poisoned.
90% confidenceline 54
uv tool install vmware-nsx-mgmt
Version History (7)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/zw008/VMware-NSX/vmware-nsx)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/zw008/VMware-NSX/vmware-nsx"><img src="https://mondoo.com/ai-agent-security/api/badge/github/zw008/VMware-NSX/vmware-nsx.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/zw008/VMware-NSX/vmware-nsx.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow