# astra-sh > Open-source publisher. Listings imported from github.com/astra-sh — credited to the original author with their license. - **Listings:** 30 - **Total installs:** 0 - **Profile:** https://agentstack.voostack.com/s/astra-sh - **Website:** https://github.com/astra-sh ## Published listings - [Malicious Skill Tool Misuse](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-tool-misuse) — Skill · Free — `agentstack add skill-astra-sh-qvr-malicious-skill-tool-misuse` Fixture exercising the tool-misuse rule family (TM1a shell=True, TM1b rm -rf root, TM1c --no-verify, TM1d chmod 777, TM3 verify=False) and SC2 curl pipe shell. Used by the scanner integration test as the canonical "tool misuse" sample. - [Malicious Skill Rogue Agent](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-rogue-agent) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-rogue-agent` Fixture for the rogue-agent rule family (RA1 self-modification, RA2 session persistence via crontab and shell rc). The fixture ships a SKILL.md plus a Python helper that overwrites its own source. - [Invalid Skill No Frontmatter](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-no-frontmatter) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-no-frontmatter` A Claude skill from astra-sh/qvr. - [Trace Skill Activity](https://agentstack.voostack.com/l/skill-astra-sh-qvr-trace-skill-activity) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-trace-skill-activity` > - [Reproduce Skill Env](https://agentstack.voostack.com/l/skill-astra-sh-qvr-reproduce-skill-env) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-reproduce-skill-env` > - [Onboard Skills](https://agentstack.voostack.com/l/skill-astra-sh-qvr-onboard-skills) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-onboard-skills` > - [Optimize Skill Loop](https://agentstack.voostack.com/l/skill-astra-sh-qvr-optimize-skill-loop) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-optimize-skill-loop` >- - [Create Skill Eval](https://agentstack.voostack.com/l/skill-astra-sh-qvr-create-skill-eval) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-create-skill-eval` >- - [Example Skill](https://agentstack.voostack.com/l/skill-astra-sh-qvr-example-skill) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-example-skill` An example skill for testing registry discovery. - [Malicious Skill Signatures](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-signatures) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-signatures` Fixture for the YARA-lite signature engine. Carries a small bash reverse-shell script (YR1_bash_reverse_shell) and a minimal PHP eval webshell (YR2_php_eval_shell) so the integration test can assert both critical signature matches in a single scan. - [Wrong Name](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-name-mismatch) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-name-mismatch` The name field does not match the directory name. - [Verify Skill Supply Chain](https://agentstack.voostack.com/l/skill-astra-sh-qvr-verify-skill-supply-chain) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-verify-skill-supply-chain` > - [Malicious Skill Secrets](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-secrets) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-secrets` Fixture for the secrets check. Contains hardcoded credential-shaped strings that the scanner must flag as critical findings. - [Malicious Skill Injection](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-injection) — Skill · Free — `agentstack add skill-astra-sh-qvr-malicious-skill-injection` Fixture for the prompt-injection check. Contains several documented injection patterns embedded as instructions, not as docs about injection. - [Starts With Hyphen](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-starts-hyphen) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-starts-hyphen` This skill name starts with a hyphen. - [Invalid Uppercase](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-uppercase) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-uppercase` This skill name has uppercase characters. - [Malicious Skill Mcp Perms](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-mcp-perms) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-mcp-perms` Fixture for the MCP least-privilege check. Declares allowed-tools containing only "Read" but ships Python code that exercises shell and network capabilities, so LP1 must fire for both undeclared capabilities. - [Invalid Skill Empty Desc](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-empty-desc) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-empty-desc` A Claude skill from astra-sh/qvr. - [Malicious Skill Data Exfil](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-data-exfil) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-data-exfil` Fixture for the data-exfiltration patterns. Designed to fire E2 (env harvesting), E3 (filesystem credential scan), and E4 (conversation export) in a single skill so the scanner regression test can assert the whole category at once. - [Invalid Skill No Name](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-no-name) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-no-name` A skill missing the required name field. - [Valid Skill](https://agentstack.voostack.com/l/skill-astra-sh-qvr-valid-skill) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-valid-skill` > - [Malicious Skill Unicode](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-unicode) — Skill · Free — `agentstack add skill-astra-sh-qvr-malicious-skill-unicode` Fixture for the unicode check. Contains hidden zero-width and bidirectional-override characters that the scanner must flag. - [Clean Skill](https://agentstack.voostack.com/l/skill-astra-sh-qvr-clean-skill) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-clean-skill` A baseline skill that the security scanner must report as completely clean. Used as a false-positive gate. - [Malicious Skill Permissions](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-permissions) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-permissions` Fixture for the permissions check. Declares unrestricted Bash in allowed-tools and ships a dangerous executable script. - [Invalid Skill Bad Format](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-bad-format) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-bad-format` A Claude skill from astra-sh/qvr. - [Fork And Publish Skill](https://agentstack.voostack.com/l/skill-astra-sh-qvr-fork-and-publish-skill) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-fork-and-publish-skill` > - [This Name Is Way Too Long And Exceeds The Sixty Four Character Maximum Allowed By Spec](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-long-name) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-long-name` This skill has a name that is too long. - [Malicious Skill Supply Chain](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-supply-chain) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-malicious-skill-supply-chain` Fixture for the supply-chain check. Ships a requirements.txt pinning a known-vulnerable pyyaml (CVE-2020-14343), an unpinned requirement, an abandoned package, and a typosquatted name. Drives SC1/SC4/SC5/SC6 simultaneously. - [Bad Name](https://agentstack.voostack.com/l/skill-astra-sh-qvr-invalid-skill-consecutive-hyphens) — Skill · Free · security-reviewed — `agentstack add skill-astra-sh-qvr-invalid-skill-consecutive-hyphens` This skill has consecutive hyphens in the name. - [Malicious Skill Mcp Poisoning](https://agentstack.voostack.com/l/skill-astra-sh-qvr-malicious-skill-mcp-poisoning) — Skill · Free — `agentstack add skill-astra-sh-qvr-malicious-skill-mcp-poisoning` format dates --- Seller on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Install any with `agentstack add `.