Book a 30-minute demo →
Skill scan report

wangkang-skill-c

View on GitHub
14 Low This skill contains obfuscated or hidden content. Automated analysis flagged 1 additional risk pattern.

What this skill does

This skill is a tool for creating and managing other skills. It provides guidance on how to structure and develop skills that extend Claude's capabilities with specialized knowledge, workflows, or too

github/leoyeai - Excessive Agency - 2.1k stars

ThreatsExcessive Agency Obfuscation

Threat analysis

Excessive Agency1 finding
Obfuscation1 finding

Skill info

Nameleoyeai/wangkang-skill-c
Registrygithub
Versione5199b5
PURLpkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=wangkang-skill-c
Stars2.1k

Assessments (2)

Excessive Agency1 finding MEDIUM
MEDIUM

Excessive Agency via local-llm-review

SKILL.md

The skill provides guidance on creating skills that can 'transform Claude from a general-purpose agent into a specialized agent equipped with procedural knowledge'. This suggests the skill may enable 
Obfuscation1 finding LOW
LOW

Obfuscation via local-llm-review

_meta.json

The 'commit' field points to a specific GitHub commit, which could be used to trace the origin of the skill. While not inherently malicious, this could be used for obfuscation or to obscure the skill'

Badge

Add the Anomity scan badge for wangkang-skill-c to your README.

Anomity Skill Check badge

Markdown
[![Anomity Skill Check](https://anomity.ai/skills/badge.svg)](https://anomity.ai/skills/github/leoyeai/wangkang-skill-c/)
HTML
<a href="https://anomity.ai/skills/github/leoyeai/wangkang-skill-c/"><img src="https://anomity.ai/skills/badge.svg" alt="Anomity Skill Check"></a>
Image URL
https://anomity.ai/skills/badge.svg

How Anomity governs this at runtime

Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.

Book a 30-minute demo to see your own skill inventory.

Methodology and disputes

Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of wangkang-skill-c? Report an issue or request a rescan.

Ask AI about Anomity
ChatGPT Claude Perplexity Google AI Grok