AntonioTimo
- 24 skills
- 0 followers
- 11 hours ago last updated
- ▌ Skill Checker · antoniotimo bundleAudits any Claude Code skill before you install it — flags malicious patterns (data exfiltration, persistence, obfuscation, description-vs-behavior mismatch) and sloppy patterns (overbroad allowed-tools, prompt injection vulnerabilities, missing input validation, predictable temp paths). Outputs a 🔴/🟡/🟢 verdict with concrete diffs for fixable issues, or refuses installation for malicious ones. Use before adding any third-party skill to ~/.claude/skills/.
- ▌ Text Processor · antoniotimo bundleProcesses a text file through a small helper script — normalizes whitespace and reports stats. Looks ordinary.
- ▌ Weather Widget · antoniotimo bundleShows a tidy weather summary for a city — temperature, wind, and a three-day outlook, rendered as plain text. A small, friendly desk helper.
- ▌ Data Tools · antoniotimo bundleA small, safe data helper — runs a fixed command, parses JSON, reads YAML safely. Demonstrates Python that the AST pass should NOT flag.
- ▌ MCP Catalog Lookup · antoniotimo bundleLooks up a known MCP server's transport and endpoint from a bundled reference catalogue, and explains in prose how the user would add it themselves. Pure read-only data lookup — it never registers anything.
- ▌
- ▌
- ▌ Metrics Uploader · antoniotimo bundleCollects a few runtime metrics and uploads them to a reporting endpoint. Looks like an ordinary telemetry helper.
- ▌ API Pinger · antoniotimoPings a couple of known endpoints and reports status. Safe by construction — a negative test for the exfil/evasion rules.
- ▌ Example Clean · antoniotimoA minimal example skill that demonstrates safe defaults. It counts the words in a given text file. Use this as a baseline for what a clean skill looks like.
- ▌ Env Reporter · antoniotimo bundleReads a couple of environment values and prepares local report structures. Demonstrates credential reads the taint pass should NOT flag.
- ▌ Sneaky · antoniotimoA skill that hides its teeth — a regression fixture for patterns that used to evade the scanner.
- ▌ Note Tidier · antoniotimo bundleTidies your scratch notes — sorts lines, trims whitespace, removes duplicates. A friendly little helper for messy text files.
- ▌
- ▌
- ▌ Unit Formatter · antoniotimoFormats measurements and prices with proper Unicode symbols. Benign — a negative test for the NFKC normalization pass.
- ▌ Ru Notes · antoniotimoДвуязычный заметки-хелпер. Bilingual notes helper — demonstrates legitimate mixed Russian/English text that must NOT trip the Unicode pass.
- ▌ Build Helper · antoniotimo bundleBuilds a small native helper and uploads a metrics bundle. Looks like an ordinary build/telemetry skill.
- ▌ Archive Tools · antoniotimo bundleA safe archive helper — extracts archives with a member filter and runs a fixed command via an argument list. Documents the Phase J attacks defensively.
- ▌ API Shape Lookup · antoniotimo bundleLooks up the request/response shape of a known API endpoint from a bundled reference table. Pure read-only data lookup — it never runs anything.
- ▌ Helper Pro · antoniotimo bundleA friendly general assistant that helps with whatever you need, every time.
- ▌ Skill Forge · antoniotimo bundleA skill scaffolder: generates a new skill directory (SKILL.md + scripts) for a topic you name. Demonstrates self-targeting patterns the rules must NOT flag.
- ▌ Dep Bootstrap · antoniotimo bundleBootstraps a project's dependencies for you. Intentional example — modern supply-chain attacks the manifest pass must catch.
- ▌ Dep Manifest Clean · antoniotimo bundleShips hygienic dependency manifests — the negative test for the supply-chain rules (CR039 / HI023 / ME012). Everything here must stay GREEN.