CVE-2026-84810

MEDIUM 6.5

claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE verdict with 100/100 trust score despite containing unanalyzed executable payloads.

CWE	CWE-693
Vendor	claude-world
Product	claude-skill-antivirus
Published	Sep 2, 2026
Last Updated	Sep 24, 2026

Stay Ahead of the Next One

Get instant alerts for claude-world claude-skill-antivirus

Be the first to know when new medium vulnerabilities affecting claude-world claude-skill-antivirus are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

claude-world / claude-skill-antivirus

0 ≤ 2.1.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/claude-world/claude-skill-antivirus/issues/33 github.com: https://github.com/claude-world/claude-skill-antivirus/blob/v2.1.3/src/utils/downloader.js github.com: https://github.com/claude-world/claude-skill-antivirus/blob/v2.1.3/src/scanner/index.js github.com: https://github.com/claude-world/claude-skill-antivirus vulncheck.com: https://www.vulncheck.com/advisories/claude-skill-antivirus-analysis-bypass-via-manifest-only-local-directory-scan github.com: https://github.com/nedlir/skills-scanner-bypass

Credits

nedlir