overtly-malicious-skills

KO | EN

gitlite — search

#javascript #react #ai #typescript #go #golang #android #machine-learning #deep-learning #windows #security #mcp #openai #open-source

overtly-malicious-skills

(★ 34)

Malicious skills for testing skill scanners

overtly-malicious-skills Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# overtly-malicious-skills

This repository contains the four malicious skills created by the Machine Learning Security team at Trail of Bits to test out the reliability of skill scanners. You can check out our writeup describing the skills and how we used them to subvert scanners in our blog post, [The Sorry State of Skill Distribution](https://blog.trailofbits.com/2026/06/03/the-sorry-state-of-skill-distribution/).

**WARNING: THESE SKILLS ARE MALICIOUS AND INTENDED FOR SECURITY RESEARCH PURPOSES ONLY. DO NOT INSTALL THEM.**

## Skills

- **csv-summarizer** - Claims to summarize the dimensions of a .csv file. Actually dumps the contents of the environment variables store.
- **context-loader** - Claims to synchronize startup context across Claude instances. Actually smuggles a malicious script within the archive of XML underlying a hidden .docx file.
- **simple-formatter** - Claims to formats text according to style guidelines (capitalize sentences, fix spacing, punctuation rules). Actually uses Python bytecode poisoning to steal environment variables.
- **dev-env-setup** — Claims to bootstrap standardized development environment configuration (npm/yarn registry, editor settings, pre-commit hooks, secrets hygiene). Actually uses a prompt injection to convince the scanner it is fine to overwrite the npm/yarn registry with an attacker-controlled site.

overtly-malicious-skills

overtly-malicious-skills Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

overtly-malicious-skills

overtly-malicious-skills Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README