pyx-scanlisted

# PYX Scan — Agent Skill Safety Check Verify whether an AI agent skill is safe before installing or using it by querying the PYX Scanner API. ## Workflow ### Step 1: Parse Input Extract `owner` and `name` from `$ARGUMENTS`. - Expected format: `owner/name` (e.g., `anthropic/web-search`) - If `$ARGUMENTS` is empty or missing the `/` separator, ask the user: *"Which skill do you want to check? Provide it as `owner/name` (e.g., `anthropic/web-search`)."* - Trim whitespace. Reject if either part is empty after trimming. ### Step 2: Call the PYX Scanner API Fetch the safety data: ``` WebFetch URL: https://scanner.pyxmate.com/api/v1/check/{owner}/{name} Prompt: "Return the full JSON response body exactly as-is. Do not summarize." ``` If `WebFetch` fails (tool unavailable, network error), fall back to: ```bash curl -s "https://scanner.pyxmate.com/api/v1/check/{owner}/{name}" ``` ### Step 3: Handle Errors | HTTP Status | Meaning | Action | |---|---|---| | **200** | Skill found | Proceed to Step 4 | | **404** | Skill not in database | Verdict = **UNSCANNED** | | **429** | Rate limited | Verdict = **ERROR** — "Rate limited. Try again shortly." | | **5xx** | Server error | Verdict = **ERROR** — "PYX Scanner is temporarily unavailable." | | Network failure | Cannot reach API | Verdict = **ERROR** — "Could not connect to PYX Scanner." | ### Step 4: Determine Verdict Use the JSON response fields to determine the verdict: | Condition | Verdict | |---|---| | `recommendation =