Is capture-fixture safe to install?

SaferSkills independently audited capture-fixture (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.claude/skills/capture-fixture/SKILL.md · 1 file

.claude/skills/capture-fixture/SKILL.md2.1 KB · Markdown

name: capture-fixture

description: Capture a live API response as a JSON test fixture for a given service and endpoint

disable-model-invocation: true

Capture Fixture

Capture a real API response and save it as a JSON fixture for TDD testing.

Usage

/capture-fixture <service> <description>

Examples:

/capture-fixture scryfall card lookup for Muldrotha
/capture-fixture spellbook combos for Muldrotha
/capture-fixture 17lands card ratings for LRW PremierDraft
/capture-fixture edhrec commander page for Muldrotha

Workflow

Identify the endpoint from docs/SERVICE_CONTRACTS.md based on the service and description.

Make the request using curl or python -c with httpx. Include required headers:

Scryfall: User-Agent: mtg-mcp-server/<version> and Accept: application/json
All others: Accept: application/json

Save the response to tests/fixtures/<service>/:

Use a descriptive snake_case filename (e.g., card_muldrotha.json, search_sultai_commander.json, card_not_found.json)
Pretty-print with jq . or python -m json.tool
Create the directory if it doesn't exist

Capture error responses too — 404s, rate limits, etc. are valuable fixtures.

Show the user:

The full URL hit
The saved file path
A brief summary of the response shape (top-level keys, array lengths)

Service Endpoints Quick Reference

Service	Base URL	Key Endpoints
scryfall	`https://api.scryfall.com`	`/cards/named?exact=`, `/cards/search?q=`, `/cards/{id}/rulings`
spellbook	`https://backend.commanderspellbook.com`	`/api/variants/?q=`, `/api/estimate-bracket/`
17lands	`https://www.17lands.com`	`/card_ratings/data?expansion=&format=`
edhrec	`https://json.edhrec.com`	`/pages/commanders/{slug}.json`, `/pages/cards/{slug}.json`

Rules

Never overwrite an existing fixture without asking first
Always pretty-print JSON
Respect rate limits — wait between requests if capturing multiple fixtures
EDHREC slugs: lowercase, hyphens for spaces, strip commas/apostrophes

capture-fixture— agent skill

Is capture-fixture safe to install?

Capture Fixture

Usage

Workflow

Service Endpoints Quick Reference

Rules

Audit the pieces. Scan the whole. Decide.