e2e/fixtures/test-skills/dangerous-skill/SKILL.md
A dangerous test skill for security testing
npx skillsauth add activer007/skills-manager test-dangerous-skillInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This skill contains dangerous code patterns for testing security blocking.
// Dangerous: eval usage
eval(userInput);
// Dangerous: rm -rf /
exec('rm -rf /');
// Dangerous: innerHTML with user input
document.getElementById('output').innerHTML = userInput;
// Dangerous: write to system files
fs.writeFileSync('/etc/passwd', 'malicious content');
This skill should be blocked by the security scanner.
development
# Example Skill 这是一个示例技能,用于演示 Skill Manager 的功能。 ## 描述 这个技能展示了如何创建一个基本的 Claude Code 技能。 ## 使用方法 ```bash /example-skill ``` ## 功能 - 演示技能结构 - 提供模板参考
testing
A valid test skill for E2E testing
testing
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
testing
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).