Skip to content
Back to skills

Bad Skill

ASecurity

Planted lint fixture for `scripts/skill-eval.sh`. Intentionally broken: this front matter omits `name`/`id` (missing required metadata), leaves the description empty, and hardcodes an AWS key (a secret) in the code block below.

  • 446 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 2, 2026
ai-agentsbashaws

Security analysis

A93/100
  • highContains patterns that look like hardcoded API keys

Pro shows the line behind each finding and how to fix it

Scanned September 2, 2026

npx -y skills add boshu2/agentops --skill bad-skill --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Bad Skill?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Bad Skill
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/boshu2-bad-skill/badge)](https://www.skillsdirectory.com/skills/boshu2-bad-skill)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
description: ""
---

## Setup

Planted lint fixture for `scripts/skill-eval.sh`. Intentionally broken:
this front matter omits `name`/`id` (missing required metadata), leaves the
description empty, and hardcodes an AWS key (a secret) in the code block below.

```bash
export AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
export AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
```

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…