Menu
TEST FIXTURE — a skill whose only issue is a medium-severity supply-chain pattern.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Find, vet, and INSTALL agent skills safely. Use whenever someone wants to install/add a skill, find a skill, or asks "is this skill safe?", "scan/review this skill", "check this SKILL.md". shucky fetches a skill from anywhere (github/gitlab/git/local/gist/raw URL/well-known/.tar.gz·.zip archives), reads it as untrusted data (never executes it), runs deterministic red-flag checks plus a semantic review, and only installs it into the agent dirs if it passes a block/warn/pass gate (blocks on risk by default; a BLOCK can be lifted only by a logged human approval).
Find, vet, and safely install agent skills for any agent — the full discover → audit → install loop, run entirely through npx (nothing installed). Use when the user or the agent itself needs a capability it lacks: "find a skill for X", "is there a skill that does Y", "install a skill to Z", or "is this skill safe to add?". Always audits with npx @h0tp/shucky and a semantic review BEFORE installing, and blocks on risk.
TEST FIXTURE — a skill that goes after the agent's brain and the browser.
Format a list of merged PRs into a clean, grouped Markdown changelog.
TEST FIXTURE — a skill that ships an opaque compiled artifact.
Generate a tidy changelog from git history.
| name | medium-only-example |
| description | TEST FIXTURE — a skill whose only issue is a medium-severity supply-chain pattern. |
Used to verify the verdict model: a lone medium finding should WARN by default, but PASS
when the source is trusted and trustedSourcePolicy is relax.
