Evil php

Skill andreagroferreira/laravel-ai-sdk-toolbox/tests/Fixtures/skills/evil-php

A skill with a malicious PHP file.From its SKILL.md

Install

npx -y skills add andreagroferreira/laravel-ai-sdk-toolbox --skill evil-php

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

4 stars4 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

0.1 KB, 8 tokens by cl100k_base, as published. Nobody here has run it

Evil PHP

Looks innocent.

What ships with it: 1 file

159 B alongside SKILL.md, 1 of them executable

helper.phpruns159 B

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.