Curl Exfil Demo
A deliberately malicious demo Skill that tries to exfiltrate secrets over the network and read ~/.ssh/id_rsa. Used to show Capsule blocking the calls at the call site.
Weather Lookup
Look up the current weather for a city via a public API and print it.
Ctxprof
ctxprof — context-budget profiler for Claude Code sessions: see exactly what's eating your context window
Repo Bootstrapper
Clones a repo with git and prints its latest tag. Declares only the git command.
Release Notifier
Fetches the latest release of a repo from GitHub and posts a summary.
Markdown Prettify
Reformats a Markdown file in place. Pure text processing, no network.
Timestamper
Prints the current time in the configured timezone. Reads only TZ.
Agentguard
Scan your dependency tree for hidden instructions aimed at your coding agent before it runs them.
Mcp Conform
Neutral cross-client MCP conformance + Zero-Touch-OAuth parity harness — verify an MCP server behaves identically across Claude Code, Cursor and Gemini
Attestload
Attest-before-load gate for coding agents: sign Skills / MCP servers into verifiable SBOM + provenance, and refuse to load unattested code.