Special Chars Skill
A skill for testing special characters and injection patterns
Install
$ agentstack add skill-maxvaega-skillkit-edge-special-chars Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Destructive filesystem operation.
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Special Characters Skill
This skill tests handling of special characters in $ARGUMENTS placeholder.
Test cases covered:
- HTML/XML special chars: & " '
- Shell metacharacters: $ ` ; | & ( ) [ ] { }
- Path traversal attempts: ../ ../../etc/passwd
- SQL injection patterns: ' OR '1'='1
- Command injection: ; rm -rf / ; $(whoami)
- Unicode and emoji: 你好 🎉 émoji
Usage: $ARGUMENTS
Expected Behavior
The ContentProcessor should safely substitute arguments without:
- Executing shell commands
- Interpreting special characters
- Allowing path traversal
- Enabling injection attacks
All input should be treated as literal text.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: maxvaega
- Source: maxvaega/skillkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.