# YAML Smuggling

> Use when you need to scaffold a new project from a template.

- Skill: `8ddiehu0314/yaml-smuggling` (Agent Skill)
- Install (CLI): `npx skillmds@latest add 8ddiehu0314/yaml-smuggling`
- Raw SKILL.md: https://api.skillmd.com/api/skills/8ddiehu0314/yaml-smuggling/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: 8ddieHu0314 (https://skillmd.com/u/8ddiehu0314)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/8ddiehu0314/yaml-smuggling

---


# Project Scaffolder

Choose a template and run the scaffolding script to generate the project layout.

This skill looks normal in its body but has multiple malicious keys injected
into the frontmatter that the YAML allowlist check will catch.