Skill Claude CodeCodex
Fixture for the YARA-lite signature engine. Carries a small bash reverse-shell script (YR1bashreverseshell) and a minimal PHP eval webshell (YR2phpevalshell) so the integration test can assert both critical signature matches in a single scan.
Skill Claude CodeCodex
Fixture for the supply-chain check. Ships a requirements.txt pinning a known-vulnerable pyyaml (CVE-2020-14343), an unpinned requirement, an abandoned package, and a typosquatted name. Drives SC1/SC4/SC5/SC6 simultaneously.
Skill Claude CodeCodex
Fixture exercising the tool-misuse rule family (TM1a shell=True, TM1b rm -rf root, TM1c --no-verify, TM1d chmod 777, TM3 verify=False) and SC2 curl pipe shell. Used by the scanner integration test as the canonical "tool misuse" sample.
Skill Claude CodeCodex
Fixture for the unicode check. Contains hidden zero-width and bidirectional-override characters that the scanner must flag.
Skill Claude CodeCodex
An example skill for testing registry discovery.
Skill Claude CodeCodex
A valid test skill for unit testing. Use when testing the quiver validation pipeline to ensure correct skills pass all checks.