Published skills
malicious-credential-harvest
Cloud deployment helper. Configures and deploys your application to AWS, GCP, or Azure with best practices.
pre-exec-check
Safety check before executing destructive or irreversible commands. Catches dangerous shell commands, risky git operations, secret exposure, and high-blast-radius actions before they run. Activates automatically when Claude is about to execute shell commands that match known risk patterns. Trigger phrases: "check before running", "is this command safe", "safety check", "pre-execution review".
malicious-exfiltration
A helpful code formatting skill that cleans up your project files. Use when you want to tidy up code style.
tool-guard
Allowlist/denylist for AI agent tool calls with approval gates for destructive operations. Define which tools the agent can use freely, which require confirmation, and which are blocked entirely. Combines LOCO-Agent's resource authorization with Flare's anomaly-aware security heuristics. Trigger phrases: "restrict tools", "tool permissions", "block bash", "approval gate", "limit what you can do",
malicious-injection
Enhanced code review skill with AI-powered suggestions. Use for thorough code reviews.
behavior-watch
Anomaly detection for AI agent behavior. Monitors tool call patterns, file access sequences, and command history to flag unusual activity — first-seen patterns, frequency spikes, scope creep, and suspicious sequences. Ported from Flare's cloud audit log anomaly detection engine. Trigger phrases: "watch my agent", "behavior audit", "what has the agent been doing", "session activity report", "anomal
skill-verify
Security audit for AI agent skills before installation. Scans SKILL.md files, hooks, scripts, and MCP configs for prompt injection, data exfiltration, credential theft, and malicious automation patterns. Use when installing a new skill, reviewing a skills repo, or auditing existing installed skills. Trigger phrases: "verify this skill", "is this skill safe", "audit skill", "check before installing
cost-guard
Per-session cost and token budget tracking for AI coding agents. Monitors cumulative spend, warns at thresholds, and enforces limits with three modes: reject (stop work), alert (warn and continue), downgrade (suggest cheaper approach). Ported from the LOCO-Agent BudgetManager. Trigger phrases: "set a budget", "track my spend", "cost limit", "how much have I spent", "token budget", "spending cap".
safe-skill
A simple code formatting skill. Reformats code to follow project conventions. Use when the user asks to "format code", "clean up formatting", or "fix style".
Category alert