40Medium
The skill lacks version pinning for its installation command, creating a supply chain risk, and fails to meet metadata requirements regarding license information and compatibility field length.
Skill Info
Namezw008/VMware-NSX/vmware-nsx
Registrygithub
Versionc3c9d926b149
PURLpkg:github/zw008/VMware-NSX@c3c9d926b149?skill=vmware-nsx
Stars4
Source
SHA-256c6dc52be8560...
SHA-17a178426aa65...
MD5bb394794d7f3...
TLSH5e92d657f614...
ssdeep384:GHqTWgJJ...
Size21,017 bytes
Install
This skill has findings worth reviewing before installing.
GitHub
Skills.shDocs
npx skills add https://github.com/zw008/VMware-NSXAssessments (2)
AI Agent Traps ↗Organization name detectedmediumpii exposureAML.T0024LLM02:2025
NER model detected organization in skill content (confidence: 0.80)
80% confidence
N**********
Organization name detectedmediumpii exposureAML.T0024LLM02:2025
NER model detected organization in skill content (confidence: 0.53)
53% confidenceline 26
*
Organization name detectedmediumpii exposureAML.T0024LLM02:2025
NER model detected organization in skill content (confidence: 0.69)
69% confidenceline 127
M**
Unpinned dependency installationlowsupply chainAML.T0010AML.T0019AML.T0058LLM03:2025
The installation instruction uses 'uv tool install vmware-nsx-mgmt' without version pinning, which could lead to the execution of arbitrary code if the package registry is compromised or the package is updated maliciously.
80% confidenceline 53
uv tool install vmware-nsx-mgmt
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Compatibility field exceeds maximum lengthinfopolicy violation
Skill 'compatibility' field exceeds the Agent Skills spec limit of 500 characters.
100% confidence
Version History (5)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/zw008/VMware-NSX/vmware-nsx)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/zw008/VMware-NSX/vmware-nsx"><img src="https://mondoo.com/ai-agent-security/api/badge/github/zw008/VMware-NSX/vmware-nsx.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/zw008/VMware-NSX/vmware-nsx.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow