# Numpi

> A synthetic fixture skill bundled with SkillGuard for SG10 (marketplace typosquatting detection) end-to-end tests. Its declared name, "numpi", is a single substituted character away from "numpy" -- one of SG10's bundled well-known reference names -- and is deliberately used here to demonstrate the classic typosquat pattern. Do not install or run this in a real agent.

- Skill: `rudrendupaul/numpi` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add rudrendupaul/numpi`
- Raw SKILL.md: https://api.skillmd.com/api/skills/rudrendupaul/numpi/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: RudrenduPaul (https://skillmd.com/u/rudrendupaul)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/rudrendupaul/numpi

---


# Typosquat Skill (fixture)

This skill exists only to trip SG10. Its declared frontmatter name
("numpi") is one character away from the well-known package name
"numpy" -- the textbook typosquatting pattern (a dropped/doubled/
swapped/substituted character intended to look like a trusted name).

Run:

```
npx skillguard-cli scan ./examples/typosquat-skill
```

to see SkillGuard flag it with a HIGH-severity SG10 finding.