메뉴
TEST FIXTURE — a skill whose only issue is a medium-severity supply-chain pattern.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Find, vet, and INSTALL agent skills safely. Use whenever someone wants to install/add a skill, find a skill, or asks "is this skill safe?", "scan/review this skill", "check this SKILL.md". shucky fetches a skill from anywhere (github/gitlab/git/local/gist/raw URL/well-known/.tar.gz·.zip archives), reads it as untrusted data (never executes it), runs deterministic red-flag checks plus a semantic review, and only installs it into the agent dirs if it passes a block/warn/pass gate (blocks on risk by default; a BLOCK can be lifted only by a logged human approval).
Find, vet, and safely install agent skills for any agent — the full discover → audit → install loop, run entirely through npx (nothing installed). Use when the user or the agent itself needs a capability it lacks: "find a skill for X", "is there a skill that does Y", "install a skill to Z", or "is this skill safe to add?". Always audits with npx @h0tp/shucky and a semantic review BEFORE installing, and blocks on risk.
TEST FIXTURE — a skill that goes after the agent's brain and the browser.
Format a list of merged PRs into a clean, grouped Markdown changelog.
TEST FIXTURE — a skill that ships an opaque compiled artifact.
Generate a tidy changelog from git history.
| name | medium-only-example |
| description | TEST FIXTURE — a skill whose only issue is a medium-severity supply-chain pattern. |
Used to verify the verdict model: a lone medium finding should WARN by default, but PASS
when the source is trusted and trustedSourcePolicy is relax.
