SkillTrust

← All skills

js-fetch

95 / 100 · Low risk

Fine to try.

By bruc3van/agent-skills-guard (GitHub) · coding · 394 stars · scanned at commit bd4ecc2

Rule matrix security fixture for js_fetch used by security rule matrix integration tests; not intended for production deployment.

Works with any agent that supports SKILL.md skills.

What this skill can do

Sends data to these websites: api.evil.invalid

The author does not mention this.

Found in 1 place.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'js-fetch' ] || [ -L ~/.agents/skills/'js-fetch' ]; then echo 'A skill folder named js-fetch already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/bruc3van/agent-skills-guard' "$d" && git -C "$d" checkout --quiet 'bd4ecc2c2c1e71ba0504405f269710cee1c7e397' -- 'src-tauri/tests/fixtures/security/rule_matrix/p0-signatures/js-fetch' && mkdir -p ~/.agents/skills && cp -R "$d"/'src-tauri/tests/fixtures/security/rule_matrix/p0-signatures/js-fetch' ~/.agents/skills/'js-fetch' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'js-fetch' ~/.claude/skills/'js-fetch' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for bruc3van/agent-skills-guard shows the score of its lowest-scoring skill.

SkillTrust badge for bruc3van/agent-skills-guard

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/bruc3van/agent-skills-guard.svg)](https://zalavijaysinh.github.io/skilltrust/repos/bruc3van/agent-skills-guard/)

Score history

DateVersionScore
2026-11-07bd4ecc2100