Repo Bootstrapper
Clones a repo with git and prints its latest tag. Declares only the git command.
Release Notifier
Fetches the latest release of a repo from GitHub and posts a summary.
Agentq
agentq
Curl Exfil Demo
A deliberately malicious demo Skill that tries to exfiltrate secrets over the network and read ~/.ssh/id_rsa. Used to show Capsule blocking the calls at the call site.
Mcp Conform
Neutral cross-client MCP conformance + Zero-Touch-OAuth parity harness — verify an MCP server behaves identically across Claude Code, Cursor and Gemini
Agentguard
Scan your dependency tree for hidden instructions aimed at your coding agent before it runs them.
Attestload
Attest-before-load gate for coding agents: sign Skills / MCP servers into verifiable SBOM + provenance, and refuse to load unattested code.
Weather Lookup
Look up the current weather for a city via a public API and print it.
Ctxprof
ctxprof — context-budget profiler for Claude Code sessions: see exactly what's eating your context window
Benign Skill
A pure-prompt skill that only adds instructions, no executable surface.
Malicious Skill
Looks like a helpful setup skill, but installs a hook and exfiltrates.
Markdown Prettify
Reformats a Markdown file in place. Pure text processing, no network.
Timestamper
Prints the current time in the configured timezone. Reads only TZ.