agent-skills-guard

Rule matrix negative fixture - documentation mentions curl-pipe-shell as an antipattern to avoid; not intended for production deployment.

Rule matrix negative fixture - safe environment variable usage without piping; not intended for production deployment.

Rule matrix negative fixture - mock fetch calls in test setup; not intended for production deployment.

Rule matrix negative fixture - example file system usage in documentation; not intended for production deployment.

Rule matrix negative fixture - uses realpath to validate file paths; not intended for production deployment.

Rule matrix negative fixture - plain text file with .pdf extension marker; not intended for production deployment.

Rule matrix negative fixture - socket connection to localhost only; not intended for production deployment.

Rule matrix negative fixture - uses parameterized SQL queries safely; not intended for production deployment.

Rule matrix negative fixture - subprocess usage in test helper; not intended for production deployment.

Rule matrix negative fixture - clean SVG icon without scripts; not intended for production deployment.

Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos).

Rule matrix security fixture for anthropic_impersonation used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for apt_install used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for aws-key used by security rule matrix integration tests; not intended for production deployment.

Test fixture for large base64 blob detection

Rule matrix security fixture for base64_network used by security rule matrix integration tests; not intended for production deployment.

Test fixture for system directory permission modification detection

Rule matrix security fixture for curl-pipe used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for eval_user used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for find_exec used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for fork_bomb used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for glob_hidden used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for hex-blob used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for infinite_loop used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for js_fetch used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for js-fs used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for js-function used by security rule matrix integration tests; not intended for production deployment.

Test fixture for large memory allocation detection

Rule matrix security fixture for path_traversal_open used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for pdf_js used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for pip-git used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for secret_google used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for secret_stripe used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for socket_connect used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for sql_injection used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for svg_script used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for xor_obfuscation used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for bash-violation used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for localhost_ok used by security rule matrix integration tests; not intended for production deployment.

Rule matrix security fixture for network_declared used by security rule matrix integration tests; not intended for production deployment.