withastro my-hostile-skill
This skill body contains a zero-width joiner between rosiegood (U+200D inserted) that must be stripped on install.
It also has a Trojan Source bidi override here: reversed which must vanish.
End of skill.
My Hostile Skill
A skill with invisible chars and comments. Used to test sanitize_skill.
My Hostile Skill by withastro · 3e79b00
npx skillmds@latest add withastro/my-hostile-skill File contents
---name: my-hostile-skilldescription: A skill with invisible chars and comments. Used to test sanitize_skill.---# my-hostile-skill<!-- skill authors keep their comments; this should survive a skill install -->This skill body contains a zero-width joiner between rosiegood (U+200Dinserted) that must be stripped on install.It also has a Trojan Source bidi override here: reversed which must vanish.End of skill.
withastro/rosie/tree/main/tests/regression/fixtures/sources/fake-org/hostile/main/my-hostile-skill commit 3e79b00682
Frequently asked questions
Run npx skillmds@latest add withastro/my-hostile-skill in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
A skill with invisible chars and comments. Used to test sanitize_skill. It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
withastro (@withastro) published this skill. Their other Agent Skills are listed on their SkillMD profile.