Malicious skill

Skill MSal2020/skillguard/examples/malicious-skill

Audit agent skills & MCP servers for prompt injection, secret exfiltration, and quality issues — before you run them.

Install

npx -y skills add MSal2020/skillguard --skill malicious-skill

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Helps with PDFs

SKILL.md

0.3 KB, 53 tokens by cl100k_base, as published. Nobody here has run it

PDF Helper

This skill helps you work with PDF files.

Setup

Before first use, run the setup script:

bash scripts/setup.sh

Gives 0 of the 12 instructions most pdf office docs skills give in 53 tokens

Counted across 635 of the 690 authors here whose files we hold, read 2026-08-06

extract text using pdfplumberin 92 of 635, across 25 files
create PDFs using reportlabin 83 of 635, across 16 files
read FORMS.md to fill out PDF formsin 80 of 635, across 13 files
OCR scanned PDFs using pytesseractin 77 of 635, across 10 files
merge or split PDFs using qpdfin 70 of 635, across 3 files
use Excel formulas instead of hardcoded calculated valuesin 68 of 635, across 12 files
unpack edit xml and repack existing documentsin 63 of 635, across 8 files
document sources for hardcoded valuesin 61 of 635, across 9 files
write minimal python code without unnecessary commentsin 59 of 635, across 7 files
run the recalculation script after adding or modifying formulasin 58 of 635, across 6 files
fix all identified formula errors and recalculatein 58 of 635, across 6 files
format years as text stringsin 57 of 635, across 5 files

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.