Repository navigation

Issues

New issue

Roadmap: cover every published attack technique
#73 · obielin opened on Oct 29, 2026
Roadmap: close the cheap evasions
#72 · obielin opened on Oct 29, 2026
Add a performance budget test for every rule
#69 · obielin opened on Oct 29, 2026

Roadmap: runtime guard that blocks what a skill should not do
obielin/skillshield#77 · opened on Oct 29, 2026
Roadmap: lock a skill after review and detect changes
obielin/skillshield#76 · opened on Oct 29, 2026
Roadmap: optional semantic check that runs locally
obielin/skillshield#75 · opened on Oct 29, 2026
Roadmap: judge what a skill does, not how it is worded
obielin/skillshield#74 · opened on Oct 29, 2026
Roadmap: cover every published attack technique
obielin/skillshield#73 · opened on Oct 29, 2026
Roadmap: close the cheap evasions
obielin/skillshield#72 · opened on Oct 29, 2026
Roadmap: measure detection and false-positive rates
obielin/skillshield#71 · opened on Oct 29, 2026
Add a performance budget test for every rule
obielin/skillshield#69 · opened on Oct 29, 2026
Measure false positives on real, safe skills
obielin/skillshield#70 · opened on Oct 29, 2026
Lethal trifecta (SG-011) switches off whenever the injection rule is evaded
obielin/skillshield#67 · opened on Oct 29, 2026
Detection gap: instruction override in languages other than English
obielin/skillshield#66 · opened on Oct 29, 2026
Warn when a skill's name imitates a well-known skill or brand
obielin/skillshield#57 · opened on Oct 28, 2026
1
Read SKILL.md frontmatter: rate injection in name and description higher, and check allowed-tools
obielin/skillshield#56 · opened on Oct 28, 2026
Detection gap: right-to-left override characters (Trojan Source)
obielin/skillshield#55 · opened on Oct 28, 2026
Detection gap: asking for a crypto wallet recovery phrase or private key
obielin/skillshield#53 · opened on Oct 28, 2026
Detection gap: instructions hidden in Unicode tag characters (ASCII smuggling)
obielin/skillshield#54 · opened on Oct 28, 2026
New rule: instructions that change how other tools run (line jumping)
obielin/skillshield#51 · opened on Oct 28, 2026
Detection gap: instructions fetched from a URL at run time
obielin/skillshield#52 · opened on Oct 28, 2026
New rule: telling the agent to hide or downgrade security findings
obielin/skillshield#50 · opened on Oct 28, 2026
Detection gap: fake <SYSTEM> or <IMPORTANT> tags and developer-mode framing
obielin/skillshield#49 · opened on Oct 28, 2026
New rule: installing a system service, cron job or login item
obielin/skillshield#48 · opened on Oct 28, 2026
New rule: writing instructions into agent memory or config files
obielin/skillshield#47 · opened on Oct 28, 2026
Detection gap: install script from a paste site, pasted into a terminal
obielin/skillshield#45 · opened on Oct 28, 2026
Detection gap: pip or npm pointed at an untrusted package registry
obielin/skillshield#46 · opened on Oct 28, 2026
Detection gap: fake prerequisite that downloads a password-protected archive and runs it
obielin/skillshield#44 · opened on Oct 28, 2026