Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Tencent SkillHub ยท Developer Tools
Pyx Scan
Check whether an AI agent skill is safe before installing or using it. Calls the PYX Scanner API to retrieve trust status, risk score, and safety recommendat...
skill openclawclawhub Free
Check whether an AI agent skill is safe before installing or using it. Calls the PYX Scanner API to retrieve trust status, risk score, and safety recommendat...
โฌ 0 downloads โ
0 stars Unverified but indexed
Install for OpenClaw
Quick setup
- Download the package from Yavira.
- Extract the archive and review SKILL.md first.
- Import or place the package into your OpenClaw setup.
Package facts
- Download mode
- Yavira redirect
- Package format
- ZIP package
- Source platform
- Tencent SkillHub
- What's included
- SKILL.md
Validation
- Use the Yavira download entry.
- Review SKILL.md after the package is downloaded.
- Confirm the extracted package contains the expected setup assets.
Install with your agent
Agent handoff
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
New install
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
Upgrade existing
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Trust & source
Release facts
- Source
- Tencent SkillHub
- Verification
- Indexed source record
- Version
- 1.1.0
Provenance
- Publisher
- fysoul17
- Source page
- View original listing
- Canonical URL
- Open canonical page
Documentation
PYX Scan โ Agent Skill Safety Check
Verify whether an AI agent skill is safe before installing or using it by querying the PYX Scanner API.
Step 1: Parse Input
Extract owner and name from $ARGUMENTS. Expected format: owner/name (e.g., anthropic/web-search) If $ARGUMENTS is empty or missing the / separator, ask the user: "Which skill do you want to check? Provide it as owner/name (e.g., anthropic/web-search)." Trim whitespace. Reject if either part is empty after trimming.
Step 2: Call the PYX Scanner API
Fetch the safety data: WebFetch URL: https://scanner.pyxmate.com/api/v1/check/{owner}/{name} Prompt: "Return the full JSON response body exactly as-is. Do not summarize." If WebFetch fails (tool unavailable, network error), fall back to: curl -s "https://scanner.pyxmate.com/api/v1/check/{owner}/{name}"
Step 3: Handle Errors
HTTP StatusMeaningAction200Skill foundProceed to Step 4404Skill not in databaseVerdict = UNSCANNED429Rate limitedVerdict = ERROR โ "Rate limited. Try again shortly."5xxServer errorVerdict = ERROR โ "PYX Scanner is temporarily unavailable."Network failureCannot reach APIVerdict = ERROR โ "Could not connect to PYX Scanner."
Step 4: Determine Verdict
Use the JSON response fields to determine the verdict: ConditionVerdictrecommendation == "safe" AND is_outdated == falseSAFErecommendation == "safe" AND is_outdated == trueOUTDATEDrecommendation == "caution"CAUTIONrecommendation == "danger"FAILEDrecommendation == "unknown"UNSCANNED
Step 5: Output Report
Format the report as structured markdown. Omit any section where the data is null or empty. For SAFE verdict: ## PYX Scan: {owner}/{name} **Verdict: SAFE** โ This skill has been scanned and verified safe. **Trust Score:** {trust_score}/10 | **Risk Score:** {risk_score}/10 | **Confidence:** {confidence}% **Intent:** {intent} | **Status:** {status} ### Summary {summary} ### About **Purpose:** {about.purpose} **Capabilities:** {about.capabilities as bullet list} **Permissions Required:** {about.permissions_required as bullet list} [View full report]({detail_url}) | [Badge]({badge_url}) For OUTDATED verdict: ## PYX Scan: {owner}/{name} **Verdict: OUTDATED** โ Last scan was safe, but the skill has been updated since. The scanned commit (`{scanned_commit}`) no longer matches the latest (`{latest_commit}`). The new version has NOT been reviewed. Proceed with caution. **Trust Score:** {trust_score}/10 | **Risk Score:** {risk_score}/10 **Last Safe Commit:** {last_safe_commit} ### Summary {summary} [View full report]({detail_url}) For CAUTION verdict: ## PYX Scan: {owner}/{name} **Verdict: CAUTION** โ This skill has potential risks that need your attention. **Trust Score:** {trust_score}/10 | **Risk Score:** {risk_score}/10 | **Confidence:** {confidence}% **Intent:** {intent} | **Status:** {status} ### Summary {summary} ### About **Purpose:** {about.purpose} **Permissions Required:** {about.permissions_required as bullet list} **Security Notes:** {about.security_notes} **Do you want to proceed despite the caution rating?** Please confirm before installing or using this skill. [View full report]({detail_url}) For FAILED verdict: ## PYX Scan: {owner}/{name} **Verdict: FAILED** โ This skill has been flagged as dangerous. Do NOT install or use it. **Trust Score:** {trust_score}/10 | **Risk Score:** {risk_score}/10 | **Confidence:** {confidence}% **Intent:** {intent} | **Status:** {status} ### Summary {summary} ### About **Security Notes:** {about.security_notes} [View full report]({detail_url}) For UNSCANNED verdict: ## PYX Scan: {owner}/{name} **Verdict: UNSCANNED** โ This skill has not been scanned by PYX Scanner. No safety data is available. You should: 1. Review the skill's source code manually before use 2. Check the skill's repository for known issues 3. Request a scan at https://scanner.pyxmate.com For ERROR verdict: ## PYX Scan: {owner}/{name} **Verdict: ERROR** โ {error_message} Safety could not be verified. Treat this skill as unverified until you can confirm its safety.
Behavioral Rules
Always call the API โ never skip the check or return a cached/assumed result. Never soften a FAILED verdict โ if the scan says danger, report danger. Do not add qualifiers like "but it might be fine." Always ask user confirmation on CAUTION โ the user must explicitly agree before proceeding. Keep reports concise โ omit null/empty sections rather than showing "N/A." No raw JSON โ always format the response as the structured markdown report above.
Self-Scan Awareness
When $ARGUMENTS is pyxmate/pyx-scan, pyxmate/pyx-scanner, or refers to this skill itself, still call the API honestly and report whatever comes back. If the result is UNSCANNED, append: "Yes, even the security scanner's own skill hasn't been scanned yet. We practice what we preach โ treat unscanned skills with caution."
Category context
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Source: Tencent SkillHub
Largest current source with strong distribution and engagement signals.
Package contents
Included in package
1 Docs
- SKILL.md