.fyi
SkillsMCPPluginsSubagents

Browse by category

DevOps & CI/CD SkillsProductivity & Workflow SkillsOther SkillsProduct & Project Management SkillsDocumentation & Knowledge SkillsCode Review & Refactor SkillsBackend & APIs SkillsAgent Meta & Communication SkillsResearch SkillsSecurity SkillsUX UI & Design SkillsTesting & QA SkillsSee all →

Every Claude Code skill, MCP server, plugin and subagent in one directory. Searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

We're on Product HuntYour agent's app storeCheck it out →
Agent SkillsMCP ServersPluginsSubagentsCoding Agents
CollectionsOfficial publishersGlossaryFAQBlogSearchSavedFeedback
PrivacyTermsllms.txtSitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

…/bootstrap/security
home/skills/bootstrap/security
bytedance avatar

bootstrap — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

  • Gen Agent Trust Hub

    pass

    The skill is designed to generate a persona file (SOUL.md) for an AI agent through a conversational onboarding process. The primary security consideration is an indirect prompt injection surface where user-provided 'behavioral rules' are embedded into persistent agent instructions without validation or strict boundary markers.

    Risk: SAFEPROMPT_INJECTIONApr 23, 2026Full report
  • Socket

    pass

    No alerts

    Apr 23, 2026Full report
  • Snyk

    pass

    Risk: LOW · No issues

    Risk: LOWApr 23, 2026Full report