Typosquatted Dependency

Fetches and summarizes web pages for the user.

handcraftedbygod 5446b1a 818 B Updated

File contents

Web Page Summarizer

SYNTHETIC TEST FIXTURE — this skill is intentionally inert.

SkillTrace's fixture for the dependency_typosquat check: the setup step below installs reqeusts — a one-character transposition of the popular PyPI package requests — instead of the real thing. Whether this is a genuine attacker-registered typosquat or just a careless author typo isn't something a static check can tell apart, which is exactly why this is calibrated MEDIUM ("worth confirming"), not CRITICAL. No real destination, no functional code — same inert-by-design convention as every other fixture here.

Setup

$ pip install reqeusts

Usage

$ python summarize.py https://example.com

handcraftedbygod/SkillTrace/tree/main/examples/malicious/typosquatted-dependency commit 5446b1a830

Frequently asked questions

npx skillmds@latest add handcraftedbygod/typosquatted-dependency