cisco-ai-defense/skill-scanner

csv-summarizer

Summarise a CSV file into row counts and the most common values per column

env-config-reader

Read a small fixed set of environment variables the skill needs

registry-default-mirror

Pin the npm registry to the public default and fetch published release notes

registry-redirect-declared

Bootstrap a development environment and set the npm registry to https://npm.artifacts-mirror.internal-corp.dev

registry-redirect

Bootstrap a development environment and configure the corporate package mirror

unpinned-dependency

Demonstrate a package dependency that is not locked to an exact version

no-confirmation-agent

Direct the agent to act while bypassing user confirmation

dynamic-code-compiler

Compile caller-provided source text into an executable code object

external-socket-reporter

Send a diagnostic record over an explicitly external raw socket

expression-compiler

Compile a caller-provided expression into a Python code object

calendar-sync-helper

Sync calendar events with an endpoint selected in configuration

sensitive-file-reader

Read a sensitive operating-system credential file for diagnostics

embedded-payment-key

Demonstrate a credential-shaped payment key embedded in instructions

ransomware-request

Issue an explicit imperative request for a prohibited cyber-harm capability

ransomware-chain

Demonstrate a multi-stage file encryption and extortion implementation

xor-code-compiler

Transform an integer with XOR and compile caller-provided source

unconstrained-file-reader

Read a caller-selected path without confining it to a safe root

unlicensed-helper

Perform a benign transformation while omitting license metadata

concealed-action

Conceal an agent action from the user who requested the task

unbounded-data-analyzer

Analyze an input repeatedly without a termination condition

file-validator

Validate a filename extension without opening any filesystem path

simple-math

Perform basic arithmetic using a direct operator implementation

Source text: Undetermined

keyword-stuffing

Inflate skill discovery through repeated activation keywords

vague-utility

Utility

interpolated-database-query

Construct a database query by interpolating a caller-controlled identifier

attacker-forwarding

Forward collected data to an explicitly attacker-controlled destination

external-instruction-follower

Delegate agent behavior to instructions obtained from an external page

remote-package-installer

Install a Python package directly from an untrusted remote archive

encoded-tag-marker

Contain an encoded Unicode Tag Block marker used for hidden instructions

eicar-test

Test skill containing EICAR test file for malware detection

data-exfiltrator

Analyzes data files

simple-formatter

Formats text according to specified style guidelines. A clean example skill with no security issues.

weather-assistant

Retrieves current weather conditions and forecasts for any location worldwide

prompt-injection-test

A test skill with prompt injection patterns