happyhackingspace-skills-216ddf — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited happyhackingspace-skills-216ddf (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Agent Skills for Happy Hacking Space's open-source security tools. Each skill teaches your coding agent how to use one of our tools, from spinning up vulnerable labs to impersonating browsers and sandboxing code.
Compatible with Claude Code, OpenAI Codex, Google Gemini CLI, and Cursor. Built on the open Agent Skill format.
In practice, skills are self-contained folders that package instructions, scripts, and resources together for an AI agent to use on a specific use case. Each folder includes a SKILL.md file with YAML frontmatter (name and description) followed by the guidance your coding agent follows while the skill is active.
[!NOTE] 'Skills' is actually an Anthropic term used within Claude AI and Claude Code and not adopted by other agent tools, but we love it! OpenAI Codex uses the open Agent Skills format, where each skill is a directory with aSKILL.mdfile that Codex discovers from standard.agents/skillslocations documented in the Codex Skills guide. Codex can also work with anAGENTS.mdfile. Google Gemini uses 'extensions' to define the instructions for your coding agent in agemini-extension.jsonfile. This repo is compatible with all of them, and more!
[!TIP] If your agent doesn't support skills, you can use agents/AGENTS.md directly as a fallback.Happy Hacking Space skills are compatible with Claude Code, Codex, Gemini CLI, and Cursor.
/plugin marketplace add happyhackingspace/skills/plugin install <skill-name>@happyhackingspace/skillsFor example:
/plugin install vt@happyhackingspace/skillsskills/ directory into one of Codex's standard .agents/skills locations (for example, $REPO_ROOT/.agents/skills or $HOME/.agents/skills) as described in the Codex Skills guide.SKILL.md instructions when it decides to use that skill or when you explicitly invoke it.AGENTS.md, you can use the generated agents/AGENTS.md file in this repo as a fallback bundle of instructions.gemini-extension.json to integrate with the Gemini CLI.gemini extensions install . --consentor use the GitHub URL:
gemini extensions install https://github.com/happyhackingspace/skills.git --consentThis repository includes Cursor plugin manifests:
.cursor-plugin/plugin.jsonInstall from repository URL (or local checkout) via the Cursor plugin flow.
For contributors, regenerate manifests with:
./scripts/publish.shEach skill below wraps one of our open-source tools so your coding agent can use it directly. Contributions welcome.
<!-- This table is auto-generated by scripts/generate_agents.py. Do not edit manually. --> <!-- BEGIN_SKILLS_TABLE -->
| Name | Description | Documentation |
|---|---|---|
dit | Classify HTML pages, forms, and fields using machine learning. Detect page types, form types, and field types from HTML content or URLs. | SKILL.md |
funurl | A functional URL Swiss Army knife. Parse, modify, encode, decode, and deduplicate URLs from the command line. | SKILL.md |
gakido | High-performance Python HTTP client with browser impersonation, TLS fingerprinting, and anti-bot evasion. Supports HTTP/1.1, HTTP/2, and HTTP/3. | SKILL.md |
sindoq | AI Sandbox for secure code execution. Run untrusted code in Docker, Podman, Wasmer, gVisor, Firecracker, Kubernetes, or cloud providers. | SKILL.md |
vt | Spin up intentionally vulnerable environments from the terminal. Deploy labs like DVWA, Juice Shop, and WebGoat for security training and CTF practice. | SKILL.md |
<!-- END_SKILLS_TABLE -->
Once a skill is installed, mention it directly while giving your coding agent instructions:
Your coding agent automatically loads the corresponding SKILL.md instructions and helper scripts while it completes the task.
SKILL.md frontmatter: ---
name: my-skill-name
description: Describe what the skill does and when to use it
---
# Skill Title
Guidance + examples + guardrails.claude-plugin/marketplace.json with a concise, human-readable description. ./scripts/publish.shto regenerate and validate all generated metadata.
The .claude-plugin/marketplace.json file lists skills with human-readable descriptions for the plugin marketplace. The CI validates that skill names and paths match between SKILL.md files and marketplace.json, but descriptions are maintained separately: SKILL.md descriptions guide when the agent activates the skill, while marketplace descriptions are written for humans browsing available skills.
Repository structure inspired by huggingface/skills.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.