praetorian-inc

Negative fixture — valid except that metadata.tags contains a value outside the controlled vocabulary (web,cloud,cicd,llm,cred). The validator MUST reject this (exit 1). Do not "fix" this fixture.

Negative fixture — valid except that allowed-tools uses commas instead of spaces. The validator MUST reject this (exit 1). Used by the negative-test job in test-skill-quality.yml.

Negative fixture — valid except it uses the legacy top-level `tags` key instead of `metadata.tags`. Strict agentskills.io rejects unknown top-level keys, so the validator MUST reject this (exit 1). Do not "fix" this fixture.

Use when validating the skill-quality reusable workflow against a well-formed skill — exercises every supported frontmatter field (name matching the directory, a non-empty description under 1024 chars, license, compatibility, metadata with string values including in-vocabulary metadata.tags and related links, and space-separated allowed-tools).

Scaffold template — intentionally has a placeholder name that does NOT match its directory. The validator MUST skip `_`-prefixed dirs, so this file must not produce an error.

Use when preparing for automated authorization testing with Hadrian from an API specification (OpenAPI/Swagger, GraphQL SDL schema, or gRPC proto file) without Burp traffic or source code. Generates Hadrian-compatible auth.yaml and roles.yaml files.

Use when performing BLE security testing on Linux/BlueZ - device scanning, GATT enumeration, read/write/notify interaction, fuzzing, and security assessment (unauthenticated read/write exposure, encryption enforcement, DFU entry, write-without-response abuse, connection parameters). Drives the single Go `caeruleus` binary; no separate server process, no external tool wrapping.

Use when reducing VirusTotal/EDR detection rates on compiled binaries — A/B testing + PE structural analysis for ML classifier signals, plus a bisection methodology for locating named YARA-style signatures