Dirty skill
Skill animaresearch/skills/04-skill-sanitizer/examples/dirty-skill
Public AI skills: small, useful agent workflows you can try today.
npx -y skills add animaresearch/skills --skill dirty-skillAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 10 stars10 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
A deliberately leaky demo skill used to show what skill-sanitizer catches before you publish. Do not ship this.
SKILL.md
1.3 KB, as published. Nobody here has run it
dirty-skill (DEMO — intentionally leaky)
This folder is a teaching fixture for skill-sanitizer. It contains planted,
clearly-fake-but-realistic leaks so you can watch the scanner BLOCK on a publish
attempt. Nothing here is a real credential — the values are dummies sized to
look real so the scanner treats them seriously.
What is planted (one per leak class)
| Class | Where | Planted value (fake) |
|---|---|---|
| SECRET | sync.py:5 | a ghp_ GitHub token (36 hex-ish chars) → hard BLOCK |
| PROPRIETARY | sync.py:8 | a hardcoded home-dir path with a username → WARN |
| PII | sync.py:11 | a personal gmail.com email → WARN |
| SERVICE CODE | sync.py | an internal Jira marker (.atlassian.net, customfield_*) → plugin-split advice |
Run it
cd examples/dirty-skill
python ../../scanner.py .
Expected: a report with BLOCK=2 WARN=4 and exit code 1. The full expected
report is in ../EXPECTED_OUTPUT.md. Fixing the four
planted leaks (env-var the token, swap the path for ~, use an example.com
email, move the Jira code to a plugin) takes the same folder to exit 0.