vulnetix/pix-ai-coding-assistant · skills/typosquat-check/SKILL.md
typosquat-check skillA
Typosquat and malicious-package detection across installed dependencies (or a single prospective addition) — cross-checks AI-malware family intelligence, package-name similarity to known popular packages, low maintainer-health signals. Use when auditing a freshly-onboarded repo, vetting a single suspicious package, gating CI on supply-chain risk, or investigating an incident.
Latest version
mdr add vulnetix/pix-ai-coding-assistant/typosquat-check@git:20260904.974b690Exact content
mdr add vulnetix/pix-ai-coding-assistant/typosquat-check@sha256:2db3ab0e3c28266dBadge
[](https://markdownregistry.com/a/art_sqiwostsatwe2g5x)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3448 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
vulnetix/pix-ai-coding-assistant · 9 stars · license Apache-2.0 · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_sqiwostsatwe2g5x GET https://markdownregistry.com/api/v1/resolve?ref=vulnetix/pix-ai-coding-assistant/typosquat-check GET https://markdownregistry.com/api/v1/blob/2db3ab0e3c28266d0129bbc7e8d963b6f62720e694c5fd7a455712c9da942cbd