Phase1 Duplicate Name
First package using a duplicated skill name.
Benign Local Script
Fixture with a local shell helper that should not emit SEC findings.
Normal Instructions
Fixture with normal visible skill guidance.
Phase1 Missing Description
A Claude skill from rdzehtsiar/agent-skill-auditor.
Codex Pass
Codex preferred path fixture.
Destructive History
Fixture for destructive repository history operation detection.
Phase1 Agent Style Path
Fixture under the .agents skill path convention.
Mixed Profile Metadata
Codex path with metadata interpreted differently by selected profiles.
Corpus Agent Artifacts
Agent path representative artifact package.
Codex Script Reference
Codex preferred path with an inert script reference.
Read Only Python
Fixture with a read-only Python helper that should not emit SEC findings.
Phase1 Duplicate Name
Second package using a duplicated skill name.
Copilot Pass
Copilot preferred path fixture.
Vscode Ignored Metadata
VS Code Copilot preferred path with host-specific tool metadata.
Phase1 Oversized Manifest
Fixture intended to exceed a deliberately low manifest size limit.
Heredoc Embedded Code
Fixture for shell heredocs that embed JavaScript and Python code.
Prompt Injection
Fixture with explicit prompt-injection-like text.
Hidden Instruction Code Block
Fixture with a hidden instruction in a fenced code block.
Package Install Pinned
Exercises package install signals with exact version pins.
Env Exfiltration
Fixture for secret-like environment data sent to an external URL.
Remote Obfuscated Execution
Fixture for remote script execution and obfuscated shell execution.
Phase1 Claude Style Path
Fixture under the .claude skill path convention.
Scoped Package Install
Exercises long scoped npm and pnpm package install parsing.
Package Install Unpinned
Exercises package install signals without lockfiles or exact pins.
Phase1 Deep Skill
Fixture under a deeply nested generic skill path.
Phase1 Github Style Path
Fixture under the .github skill path convention.
Phase1 Malformed Frontmatter
[unterminated
Write Outside
Fixture for writes outside the skill package directory.
Basic Fixture
Minimal valid skill fixture for scanner smoke tests.
Curl Bash
Fixture for remote content piped directly into a shell.
Artifact Inventory
Artifact inventory fixture.
Unsupported Permissions
Copilot preferred path with unsupported global permissions metadata.
Dynamic Execution
Fixture for dynamic code evaluation in executable scripts.
Generic Unknown Behavior
Portable path with unknown behavior metadata.
Spec Basic
Portable compatibility fixture.
Matrix Unknown Frontmatter
Matrix fixture with unsupported metadata.
Copilot Path Layout
Portable root package outside Copilot preferred paths.
Hidden Instruction Comments
Fixture with a hidden instruction in a Markdown comment.
Claude Pass
Claude preferred path fixture.
Multi Language
Fixture with Python, JavaScript, and TypeScript security signals.
Suppressed Package Install
Fixture for suppressing a reviewed security finding.
Sudo Install
Fixture for reserved sudo privilege escalation metadata.
Phase1 Broken Reference
Fixture that references a missing local file.
Claude Extra Field
Claude preferred path with portable tool metadata.
Codex Script
Codex preferred path with an inert script artifact.
Package Install Lockfile Backed
Exercises package install signals with a nearby lockfile.
Missing Name
Fixture with no declared name and no heading fallback.
Hidden Instruction Multiline Comment
Fixture with a hidden instruction in a multi-line Markdown comment.