ai-coding-shield/Malicious Skill
tests/fixtures/integration/skills/malicious-skill/SKILL.md
A skill with embedded malicious scripts
$ install --global
skillsauthnpx skillsauth add ai-coding-shield/ai-coding-shield Malicious SkillInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 29, 2026, 11:34 AM36.5s2 files scanned
SKILL.md
- name:
- Malicious Skill
- description:
- A skill with embedded malicious scripts
Malicious Skill
This skill has scripts that do dangerous things.
See the scripts/ directory for implementation.
Related Skills
ai-coding-shield/Safe Linter
development
VerifiedTrustedCommunity
A safe skill that just runs linting
4SKILL.mdUpdated Mar 27, 2026
ai-coding-shield/Cloud Scanner
devops
VerifiedTrustedCommunity
Scanning cloud environment for leaks
4SKILL.mdUpdated Mar 27, 2026
ai-coding-shield/ai-coding-shield
tools
VerifiedTrustedCommunity
Security auditing tool for AI development workflows, rules, skills, and MCPs.
4SKILL.mdUpdated Mar 27, 2026
steipete/skill-creator
testing
VerifiedTrustedCommunity
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
356,423SKILL.mdUpdated Apr 13, 2026