jdutton/three-surface
packages/agent-skills/test/fixtures/packaging-shapes/three-surface/SKILL.md
A deliberately unusual directory that holds SKILL.md plus both plugin.json and marketplace.json (non-co-located). Used to exercise the three-surface ordering contract from enumerateSurfaces.
$ install --global
skillsauthnpx skillsauth add jdutton/vibe-agent-toolkit three-surfaceInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 7, 2026, 7:17 AM179.3s1 file scanned
SKILL.md
- name:
- three-surface
- description:
- A deliberately unusual directory that holds SKILL.md plus both plugin.json and marketplace.json (non-co-located). Used to exercise the three-surface ordering contract from enumerateSurfaces.
Three-Surface Fixture
Related Skills
jdutton/syn-shell-gitstatus
business
VerifiedTrustedCommunity
Reports the current git working-tree status. Use when the user asks for a summary of uncommitted changes in the repo.
2SKILL.mdUpdated Jun 4, 2026
jdutton/syn-net-httpfetch
development
VerifiedTrustedCommunity
Fetches the current UTC time from a public HTTP time API and reports it. Use when the user asks for the current network time.
2SKILL.mdUpdated Jun 4, 2026
jdutton/syn-mcp-postgres
tools
VerifiedTrustedCommunity
Answers questions about the application database by querying it through the Postgres MCP tool. Use when the user asks about rows or tables in the app database.
2SKILL.mdUpdated Jun 4, 2026
jdutton/syn-cli-gh
tools
VerifiedTrustedCommunity
Lists open pull requests on the current GitHub repository. Use when the user asks what PRs are open.
2SKILL.mdUpdated Jun 4, 2026