[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"creator:01M71C8JCBG20FR84774RF053Q":3,"creator-list:01M71C8JCBG20FR84774RF053Q:stars:1:":19},{"accountNo":4,"login":5,"displayName":6,"avatarUrl":7,"accountType":8,"accountTypeDesc":9,"profileDescription":10,"skillCount":11,"repoCount":12,"professionCount":12,"scenarioCount":13,"totalStars":14,"updatedAt":15,"htmlUrl":16,"blogUrl":17,"company":17,"location":18,"followersCount":13,"publicReposCount":12},"01M71C8JCBG20FR84774RF053Q","try-agora","AGORA","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F291123208?v=4","ORGANIZATION","组织","sdlc tools for multiplayer coding",30,1,2,26,"2026-07-01 02:12:06","https:\u002F\u002Fgithub.com\u002Ftry-agora",null,"United States of America",{"records":20,"total":11,"current":12,"size":315},[21,59,72,90,113,131,152,164,183,197,206,223,240,263,274,283,295,304],{"skillNo":22,"name":23,"nameZh":17,"description":24,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":28,"categories":29,"keywords":38,"publishedAt":58},"01M71CAMTR0ADSZQ9CYFW363D8","valid-skill","A valid test skill for unit testing. Use when testing the quiver validation pipeline to ensure correct skills pass all checks.","try-agora\u002Fqvr","01M71C8JCYSVRHPDR1EV8T0WN8","MIT","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fvalid-skill\u002FSKILL.md",[30,35],{"categoryNo":31,"categoryName":32,"taxonomyType":33,"taxonomyTypeDesc":34},"01JBSEEDCAT000000000000008","测试与质量","SCENARIO","使用场景",{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},"01JBSEEDCAT000000000000023","Skill与智能体开发",[39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57],"valid","valid skill","unit","for","pipeline","correct","testing","quiver","use","when","Bash","Test Skill","test","read","validation","grep","git","unit testing","org","2026-11-10 10:12:30",{"skillNo":60,"name":61,"nameZh":17,"description":62,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":63,"categories":64,"keywords":67,"publishedAt":58},"01M71CAK6B219E10ZPYX0C4JK8","example-skill","An example skill for testing registry discovery.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fsample-registry\u002Fskills\u002Fexample-skill\u002FSKILL.md",[65,66],{"categoryNo":31,"categoryName":32,"taxonomyType":33,"taxonomyTypeDesc":34},{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[68,69,51,42,70,45,71,57],"example","example skill","discovery","registry",{"skillNo":73,"name":74,"nameZh":17,"description":75,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":76,"categories":77,"keywords":79,"publishedAt":58},"01M71CAHR5A0MTDYXHDDE19TJR","malicious-skill-unicode","Fixture for the unicode check. Contains hidden zero-width and bidirectional-override characters that the scanner must flag.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-unicode\u002FSKILL.md",[78],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[80,81,82,83,84,85,86,42,87,88,89],"Unicode","malicious skill","malicious","malicious skill unicode","characters","fixture","ZeRO","check","scanner","hidden",{"skillNo":91,"name":92,"nameZh":17,"description":93,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":94,"categories":95,"keywords":97,"publishedAt":58},"01M71CAFJPYFFX70KKPBM9TFT8","malicious-skill-tool-misuse","Fixture exercising the tool-misuse rule family (TM1a shell=True, TM1b rm -rf root, TM1c --no-verify, TM1d chmod 777, TM3 verify=False) and SC2 curl pipe shell. Used by the scanner integration test as the canonical \"tool misuse\" sample.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-tool-misuse\u002FSKILL.md",[96],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,98,82,99,85,100,101,102,103,104,88,51,105,106,107,108,109,110,111,112],"tool","malicious skill tool misuse","as","integration test","true","family","false","sample","pipe","curl","verify","rm","shell","integration","canonical",{"skillNo":114,"name":115,"nameZh":17,"description":116,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":117,"categories":118,"keywords":120,"publishedAt":58},"01M71CAD9MG9F0RDRQAPH9BD08","malicious-skill-supply-chain","Fixture for the supply-chain check. Ships a requirements.txt pinning a known-vulnerable pyyaml (CVE-2020-14343), an unpinned requirement, an abandoned package, and a typosquatted name. Drives SC1\u002FSC4\u002FSC5\u002FSC6 simultaneously.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-supply-chain\u002FSKILL.md",[119],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[121,81,122,82,123,124,85,125,42,126,127,128,87,129,130],"supply","chain","supply chain","malicious skill supply chain","cve","unpinned","package","requirements","name","supply-chain",{"skillNo":132,"name":133,"nameZh":17,"description":134,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":135,"categories":136,"keywords":138,"publishedAt":58},"01M71CAARKXHD0HA2N67TFBJ8B","malicious-skill-signatures","Fixture for the YARA-lite signature engine. Carries a small bash reverse-shell script (YR1_bash_reverse_shell) and a minimal PHP eval webshell (YR2_php_eval_shell) so the integration test can assert both critical signature matches in a single scan.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-signatures\u002FSKILL.md",[137],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,139,82,140,85,141,42,142,101,143,144,145,146,49,147,148,149,51,150,151],"signatures","malicious skill signatures","reverse","scan","minimal","eval","single","critical","can","webshell","engine","reverse-shell","yara",{"skillNo":153,"name":154,"nameZh":17,"description":155,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":156,"categories":157,"keywords":159,"publishedAt":58},"01M71CA8P0Y1TSY0YAXQ2AA6FX","malicious-skill-secrets","Fixture for the secrets check. Contains hardcoded credential-shaped strings that the scanner must flag as critical findings.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-secrets\u002FSKILL.md",[158],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,82,160,161,85,100,42,162,146,87,88,163],"secrets","malicious skill secrets","strings","credential",{"skillNo":165,"name":166,"nameZh":17,"description":167,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":168,"categories":169,"keywords":171,"publishedAt":58},"01M71CA6W2EP2J1ZQ36E3FSHCN","malicious-skill-rogue-agent","Fixture for the rogue-agent rule family (RA1 self-modification, RA2 session persistence via crontab and shell rc). The fixture ships a SKILL.md plus a Python helper that overwrites its own source.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-rogue-agent\u002FSKILL.md",[170],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,82,172,85,42,173,174,103,175,176,177,110,178,179,180,181,182],"malicious skill rogue agent","session","python","helper","self","via","a skill","rule","source","persistence","crontab",{"skillNo":184,"name":185,"nameZh":17,"description":186,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":187,"categories":188,"keywords":190,"publishedAt":58},"01M71CA54Q514XBJPCKFH6E4TQ","malicious-skill-permissions","Fixture for the permissions check. Declares unrestricted Bash in allowed-tools and ships a dangerous executable script.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-permissions\u002FSKILL.md",[189],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[191,81,82,192,193,85,42,49,87,52,194,195,196],"skill permissions","permissions","malicious skill permissions","write","script","Tools",{"skillNo":198,"name":199,"nameZh":17,"description":17,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":200,"categories":201,"keywords":203,"publishedAt":58},"01M71CA3WMW4D3P1G5T0478439","malicious-skill-mcp-poisoning","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-mcp-poisoning\u002FSKILL.md",[202],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,204,205,82],"malicious skill mcp poisoning","MCP",{"skillNo":207,"name":208,"nameZh":17,"description":209,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":210,"categories":211,"keywords":213,"publishedAt":58},"01M71CA204TJ58WN7H6AT4QVEH","malicious-skill-mcp-perms","Fixture for the MCP least-privilege check. Declares allowed-tools containing only \"Read\" but ships Python code that exercises shell and network capabilities, so LP1 must fire for both undeclared capabilities.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-mcp-perms\u002FSKILL.md",[212],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,205,82,214,85,42,174,215,216,217,87,218,219,110,52,220,221,196,222],"malicious skill mcp perms","only","code","capabilities","python code","exercises","network","least-privilege","but",{"skillNo":224,"name":225,"nameZh":17,"description":226,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":227,"categories":228,"keywords":230,"publishedAt":58},"01M71CA0A8M0GQE9RMWC8VDT7Q","malicious-skill-injection","Fixture for the prompt-injection check. Contains several documented injection patterns embedded as instructions, not as docs about injection.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-injection\u002FSKILL.md",[229],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[81,82,231,232,85,100,42,233,234,87,235,236,237,238,239],"malicious skill injection","injection","prompt","prompt-injection","instructions","about","docs","patterns","embedded",{"skillNo":241,"name":242,"nameZh":17,"description":243,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":244,"categories":245,"keywords":252,"publishedAt":58},"01M71C9Y6HB4SE3DK3JZQDGP9C","malicious-skill-data-exfil","Fixture for the data-exfiltration patterns. Designed to fire E2 (env harvesting), E3 (filesystem credential scan), and E4 (conversation export) in a single skill so the scanner regression test can assert the whole category at once.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Fmalicious-skill-data-exfil\u002FSKILL.md",[246,247],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},{"categoryNo":248,"categoryName":249,"taxonomyType":250,"taxonomyTypeDesc":251},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[81,82,253,254,85,255,42,142,256,257,145,258,259,147,260,88,261,51,262,163],"malicious skill data exfil","data","conversation","regression","filesystem","exfiltration","regression test","env","data-exfiltration","at",{"skillNo":264,"name":265,"nameZh":17,"description":266,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":267,"categories":268,"keywords":269,"publishedAt":58},"01M71C9WCQMQHDCSHX6NF8JNB7","Invalid-Uppercase","This skill name has uppercase characters.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Finvalid-skill-uppercase\u002FSKILL.md",[],[270,271,272,84,273,129],"uppercase","invalid","Invalid Uppercase","skill name",{"skillNo":275,"name":276,"nameZh":17,"description":277,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":278,"categories":279,"keywords":280,"publishedAt":58},"01M71C9TQBBFPZE4B1GQ9GXMNY","-starts-with-hyphen","This skill name starts with a hyphen.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Finvalid-skill-starts-hyphen\u002FSKILL.md",[],[281,282,273,129],"with","starts with hyphen",{"skillNo":284,"name":285,"nameZh":17,"description":286,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":287,"categories":288,"keywords":290,"publishedAt":58},"01M71C9S6BPTVX417670XASFR7","invalid-skill-no-name","A skill missing the required name field.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Finvalid-skill-no-name\u002FSKILL.md",[289],{"categoryNo":36,"categoryName":37,"taxonomyType":33,"taxonomyTypeDesc":34},[271,291,129,292,293,294,178],"invalid skill","invalid skill no name","no name","missing",{"skillNo":296,"name":297,"nameZh":17,"description":17,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":298,"categories":299,"keywords":300,"publishedAt":58},"01M71C9R6HNNE30ZG45BFM0J0W","invalid-skill-no-frontmatter","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Finvalid-skill-no-frontmatter\u002FSKILL.md",[],[271,291,301,302,303],"invalid skill no frontmatter","frontmatter","no frontmatter",{"skillNo":305,"name":306,"nameZh":17,"description":307,"descriptionZh":17,"repositoryFullName":25,"ownerLogin":5,"ownerAvatarUrl":7,"ownerAccountNo":4,"ownerDisplayName":6,"repositoryNo":26,"starsCount":14,"licenseSpdxId":27,"licenseFileUrl":17,"sourceHtmlUrl":308,"categories":309,"keywords":310,"publishedAt":58},"01M71C9PM5F79E24NDW5NMMDWG","wrong-name","The name field does not match the directory name.","https:\u002F\u002Fgithub.com\u002Ftry-agora\u002Fqvr\u002Fblob\u002Fmain\u002Ftestdata\u002Finvalid-skill-name-mismatch\u002FSKILL.md",[],[311,129,312,313,314],"wrong name","Wrong","directory","match",18]