agentsclimarketplace

Clean exfil

Skill AntonioTimo/skillchecker/examples/clean-exfil

paranoid auditor for Claude Code skills

Install
npx -y skills add AntonioTimo/skillchecker --skill clean-exfil

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Pings a couple of known endpoints and reports status. Safe by construction — a negative test for the exfil/evasion rules.

SKILL.md

1.3 KB, 308 tokens by cl100k_base, as published. Nobody here has run it

API Pinger

Step 1 — Ping (safe forms the exfil rules must NOT flag)

# local dev server — loopback / private IPs (guarded by HI019)
curl http://127.0.0.1:8080/health
curl http://192.168.1.10/health
# a hardcoded, trusted, NAMED host over HTTPS (not an IP literal)
curl https://api.github.com/zen
# a pinned git commit SHA (40 hex chars — under ME011's 256-char threshold):
# a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0

Why this passes audit (negative test for the exfil/evasion rules)

  • http://127.0.0.1 and http://192.168.1.10 are loopback / private IPs — the HI019 guard skips them, so local-dev URLs don't fire.
  • https://api.github.com is a named, trusted host, not an IP literal.
  • the 40-char git SHA is well under ME011's 256-char threshold.
  • there is no tunneling host, no env-to-network pipe, no IFS evasion, no Telegram API.

Expected verdict: 🟢 GREEN, exit 0.

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.