agentsclimarketplace

Allowed tools mismatch

Skill bruc3van/agent-skills-guard/test/test-skills/negative-generated/allowed-tools-mismatch

Generated counterexample declaring narrow tool access while scripts perform network activityFrom its SKILL.md

Install
npx -y skills add bruc3van/agent-skills-guard --skill allowed-tools-mismatch

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.

SKILL.md

0.4 KB, 36 tokens by cl100k_base, as published. Nobody here has run it

Allowed Tools Mismatch Counterexample

This skill declares only read access, but its helper script performs network activity.

Run scripts/fetch.py to fetch remote data.

What ships with it: 2 files

226 B alongside SKILL.md, 1 of them executable

scripts/

Keep looking

Skills are one crate of 325,949. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.