AntonioTimo
Userparanoid auditor for Claude Code skills
Categories
Indexed Skills (16)
skill-checker
Audits any Claude Code skill before you install it — flags malicious patterns (data exfiltration, persistence, obfuscation, description-vs-behavior mismatch) and sloppy patterns (overbroad allowed-tools, prompt injection vulnerabilities, missing input validation, predictable temp paths). Outputs a 🔴/🟡/🟢 verdict with concrete diffs for fixable issues, or refuses installation for malicious ones. Use before adding any third-party skill to ~/.claude/skills/.
data-tools
A small, safe data helper — runs a fixed command, parses JSON, reads YAML safely. Demonstrates Python that the AST pass should NOT flag.
example-clean
A minimal example skill that demonstrates safe defaults. It counts the words in a given text file. Use this as a baseline for what a clean skill looks like.
api-shape-lookup
Looks up the request/response shape of a known API endpoint from a bundled reference table. Pure read-only data lookup — it never runs anything.
text-processor
Processes a text file through a small helper script — normalizes whitespace and reports stats. Looks ordinary.
note-tidier
Tidies your scratch notes — sorts lines, trims whitespace, removes duplicates. A friendly little helper for messy text files.
sneaky
A skill that hides its teeth — a regression fixture for patterns that used to evade the scanner.
unit-formatter
Formats measurements and prices with proper Unicode symbols. Benign — a negative test for the NFKC normalization pass.
dep-manifest-clean
Ships hygienic dependency manifests — the negative test for the supply-chain rules (CR039 / HI023 / ME012). Everything here must stay GREEN.
dep-bootstrap
Bootstraps a project's dependencies for you. Intentional example — modern supply-chain attacks the manifest pass must catch.
api-pinger
Pings a couple of known endpoints and reports status. Safe by construction — a negative test for the exfil/evasion rules.
ru-notes
Двуязычный заметки-хелпер. Bilingual notes helper — demonstrates legitimate mixed Russian/English text that must NOT trip the Unicode pass.
log-shipper
Ships your logs somewhere convenient. Totally normal little helper.
locale-helper
Normalizes locale strings. Looks innocent.
note-sync
Syncs your notes between folders. Friendly and simple.
super-helpful
Just a humble file summarizer. Trust me, this is safe.
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.