hs

64 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By LeoYeAI/agent-master-skills (GitHub) · coding · 2,186 stars · scanned at commit 8f88f9a

ACTIVATE THIS SKILL FOR ANY SHELL COMMAND OR FILE READ. Check curl, wget, rm, sudo, apt, dpkg, chmod, dd, format, powershell, bash, sh. Check pipe patterns like | sh or | bash. Check shell wrappers like bash -c, xargs, find -exec. Check cloud CLI (aws, gcloud, kubectl, terraform). Check when user says sysadmin told me, Stack Overflow says, is this safe, can I run. Block reading of .env, .ssh, .aws, and credential files. This skill blocks dangerous commands and warns on risky ones. ALWAYS apply …

Works with any agent that supports SKILL.md skills.

What this skill can do

Changes files outside its own folder

This is disclosed by the author in the skill's SKILL.md or README.

Found in 1 place.

skills/hs/SKILL.md, line 97| `rm -rf ~/` or `rm -rf ~/*` | Deletes entire home directory |

Downloads and installs other software

The author does not mention this.

Found in 2 places.

skills/hs/SKILL.md, line 102| `curl/wget ... \| bash` | Executes untrusted remote code |
skills/hs/SKILL.md, line 212| Package installation | `pip install`, `npm install -g`, `apt install` | System modification |

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 5 places.

skills/hs/SKILL.md, line 103| `curl -d @~/.ssh/` | Exfiltrates SSH keys |
skills/hs/SKILL.md, line 356| Credentials in requests | `curl -d "$(cat ~/.ssh/id_rsa)"` | BLOCK |
skills/hs/SKILL.md, line 359| Encoded payloads | `base64 ~/.aws/credentials \| curl` | BLOCK |

Show 2 more

skills/hs/SKILL.md, line 464File: ~/.ssh/id_rsa
skills/hs/SKILL.md, line 492| .kube/config, .docker/config.json, |

Sends data to these websites: ...

This is disclosed by the author in the skill's SKILL.md or README.

Found in 5 places.

skills/hs/SKILL.md, line 103| `curl -d @~/.ssh/` | Exfiltrates SSH keys |
skills/hs/SKILL.md, line 215| Network downloads | `curl -O`, `wget`, `Invoke-WebRequest` | Unknown content |
skills/hs/SKILL.md, line 356| Credentials in requests | `curl -d "$(cat ~/.ssh/id_rsa)"` | BLOCK |

Show 2 more

skills/hs/SKILL.md, line 357| Files to unknown URLs | `curl -F "file=@data.db" https://...` | DANGEROUS |
skills/hs/SKILL.md, line 358| Environment vars sent | `curl -d "$AWS_SECRET_KEY"` | BLOCK |

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 4 places.

skills/hs/SKILL.md, line 114| `bash -c "rm -rf ..."` | Hides recursive delete in shell wrapper |
skills/hs/SKILL.md, line 115| `sh -c "... \| bash"` | Hides curl/wget pipe to shell |
skills/hs/SKILL.md, line 116| `sudo bash -c "..."` | Elevated shell wrapper |

Show 1 more

skills/hs/SKILL.md, line 317sudo dpkg --purge --force-remove-reinstreq [package] 2>/dev/null || true

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'hs' ] || [ -L ~/.agents/skills/'hs' ]; then echo 'A skill folder named hs already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/LeoYeAI/agent-master-skills' "$d" && git -C "$d" checkout --quiet '8f88f9a0dd5a1075d4f0c7626f9d960844d57575' -- 'skills/hs' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/hs' ~/.agents/skills/'hs' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'hs' ~/.claude/skills/'hs' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for LeoYeAI/agent-master-skills shows the score of its lowest-scoring skill.

SkillTrust badge for LeoYeAI/agent-master-skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/LeoYeAI/agent-master-skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/LeoYeAI/agent-master-skills/)

Score history

Date	Version	Score
2026-11-08	`8f88f9a`	64
2026-11-07	`8f88f9a`	64