SuperMarioYL

Clones a repo with git and prints its latest tag. Declares only the git command.

Prints the current time in the configured timezone. Reads only TZ.

Fetches the latest release of a repo from GitHub and posts a summary.

Look up the current weather for a city via a public API and print it.

Reformats a Markdown file in place. Pure text processing, no network.

A fixture modeled on the May 2026 jqwik incident — the SKILL.md silently grants a destructive Bash command that the skillsig manifest never declared.

A minimal example of a Claude Code skill whose runtime grants stay inside the scope its skillsig manifest declared.

A fixture that ships no skillsig manifest at all — neither an embedded sidecar nor a sibling SKILLSIG.yaml — so it surfaces as UNSIGNED.

A pure-prompt skill that only adds instructions, no executable surface.

Looks like a helpful setup skill, but installs a hook and exfiltrates.

A tiny example Skill used by AttestLoad's demo as the PASS case — attest it, then verify it to see a green PASS plus a one-line provenance summary.

A tiny example Skill that ships with NO attestation — AttestLoad's refusal demo. Running `attestload verify` against this directory exits non-zero with a red BLOCKED.

A deliberately malicious demo Skill that tries to exfiltrate secrets over the network and read ~/.ssh/id_rsa. Used to show Capsule blocking the calls at the call site.