Test fixture (F.09) — SKILL.md whose accompanying .sig signs different content. NFR-F3 hash check catches this even with --allow-unsigned.
Resources
1Install
npx skillscat add miltonadina/devops/unsigned-mismatched-sig-fixture Install via the SkillsCat registry.
SKILL.md
Mismatched signature
This fixture's .sig was copied from a DIFFERENT skill. The hash check
(defense-in-depth per NFR-F3) refuses this regardless of --allow-unsigned.