Python script with docstring mentioning zip + pretty-prints — must NOT fire R05 PASSWORD_ZIP
legit skill that reads HF_TOKEN and calls huggingface.co
legit skill that mentions CLAUDE.md in docs but writes to unrelated debug log
TypeScript skill that uses generics like Promise<User>, Vec<System> — must NOT fire R01
base64 piped to python/node/perl/ruby
short base64 blob piped to shell
| name | github-api |
| description | legit skill that reads GITHUB_TOKEN and calls api.github.com |
import os
import requests
token = os.environ["GITHUB_TOKEN"]
r = requests.get("https://api.github.com/user/repos",
headers={"Authorization": f"Bearer {token}"})
print(r.json())