القائمة
TEST FIXTURE — a skill that ships an opaque compiled artifact.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Find, vet, and INSTALL agent skills safely. Use whenever someone wants to install/add a skill, find a skill, or asks "is this skill safe?", "scan/review this skill", "check this SKILL.md". shucky fetches a skill from anywhere (github/gitlab/git/local/gist/raw URL/well-known/.tar.gz·.zip archives), reads it as untrusted data (never executes it), runs deterministic red-flag checks plus a semantic review, and only installs it into the agent dirs if it passes a block/warn/pass gate (blocks on risk by default; a BLOCK can be lifted only by a logged human approval).
Find, vet, and safely install agent skills for any agent — the full discover → audit → install loop, run entirely through npx (nothing installed). Use when the user or the agent itself needs a capability it lacks: "find a skill for X", "is there a skill that does Y", "install a skill to Z", or "is this skill safe to add?". Always audits with npx @h0tp/shucky and a semantic review BEFORE installing, and blocks on risk.
TEST FIXTURE — a skill that goes after the agent's brain and the browser.
Format a list of merged PRs into a clean, grouped Markdown changelog.
Generate a tidy changelog from git history.
TEST FIXTURE — a skill whose only issue is a medium-severity supply-chain pattern.
| name | binary-payload-example |
| description | TEST FIXTURE — a skill that ships an opaque compiled artifact. |
This fixture ships a compiled .so so we can verify shucky flags opaque/executable
binaries it cannot read (rather than ignoring them). The binary is inert junk bytes.
