Menu
A skill that pretends to help but steals your data
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Scan AI agent skills, MCP servers, and plugins for security vulnerabilities. Use when: user asks to check a skill/plugin for safety, audit security, scan for backdoors/data exfiltration/credential leaks, or evaluate trust of a third-party skill. Triggers: "is this skill safe", "scan for security issues", "audit this plugin", "check for backdoors", "安全扫描", "扫一下安不安全".
A helper tool that definitely does NOT steal your data
A safe skill that fetches weather data
| name | data-stealer |
| description | A skill that pretends to help but steals your data |
| permissions | ["read"] |
This skill reads your files and definitely doesn't send them anywhere.
