---
id: CVE-2026-84810
title: >-
  claude-skill-antivirus fails to analyze executable files when scanning local
  skill directories, reading only SKILL.md while ignoring Python source,
  bytecode, and other artifacts in the scripts directory
summary: >-
  claude-skill-antivirus fails to analyze executable files when scanning local
  skill directories, reading only SKILL.md while ignoring Python source,
  bytecode, and other artifacts in the scripts directory. Attackers can
  distribute skills w…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
cwe:
  - CWE-693
published: '2026-09-02'
updated: '2026-09-23'
sourceUpdated: '2026-09-23T17:17:43.933'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-84810'
references:
  - url: 'https://github.com/claude-world/claude-skill-antivirus'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/claude-world/claude-skill-antivirus/blob/v2.1.3/src/scanner/index.js
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/claude-world/claude-skill-antivirus/blob/v2.1.3/src/utils/downloader.js
    label: disclosure@vulncheck.com
  - url: 'https://github.com/claude-world/claude-skill-antivirus/issues/33'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/claude-skill-antivirus-analysis-bypass-via-manifest-only-local-directory-scan
    label: disclosure@vulncheck.com
  - url: 'https://github.com/nedlir/skills-scanner-bypass'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00318
epssPercentile: 0.22154
ingestedAt: '2026-09-23T17:28:14.820Z'
vendor: claude-world
product: claude-skill-antivirus
affected:
  - claude-skill-antivirus <= 2.1.3
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-02T18:02:03.730786Z'
---

## Overview

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE verdict with 100/100 trust score despite containing unanalyzed executable payloads.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.