Clean evasion

Skill AntonioTimo/skillchecker/examples/clean-evasion

Formats measurements and prices with proper Unicode symbols. Benign — a negative test for the NFKC normalization pass.From its SKILL.md

Install

npx -y skills add AntonioTimo/skillchecker --skill clean-evasion

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

1.5 KB, 373 tokens by cl100k_base, as published. Nobody here has run it

Unit Formatter

Legit compatibility characters that must NOT trip the NFKC re-scan.

Step 1 — Print a formatted line

echo "½ off — ™ brand — the ﬁ ligature — 設定ファイル"
curl http://１２７．０．０．１:8080/health
curl http://[email protected]/path
curl 127.0.0.1/health
curl -o 8.8.8.8 https://api.example.com/file
curl -H "X-Forwarded-For: 8.8.8.8" https://api.example.com/
curl -A 8.8.8.8 https://api.example.com/
curl https://api.example.com && echo 8.8.8.8
curl https://api.example.com | grep 8.8.8.8
wget -O 8.8.8.8 https://api.example.com/file
ssh -i 8.8.8.8 [email protected]
curl -X 8.8.8.8 https://api.example.com/

Inline values: api.example.com (a named host), the price ¾ unit, the № 5.

Why this passes audit (negative test for Evasion v2)

NFKC-normalizing these reveals no dangerous command — ½ → 1⁄2, ™ → TM, ﬁ → fi, CJK stays CJK. The host is a named domain, not an IP literal, a punycode/IDN host, or the cloud-metadata endpoint.

Expected verdict: 🟢 GREEN, exit 0.

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.