Agent skill · Audited from source

skill-name

skill · resciencelab/opc-skillsApache-2.0 licenceAudited 29 Oct 2026 · source aa56ee237003

★ 1,882pushed today
✓SAFEGrade B · 89/100 · 29 Oct 2026 · aa56ee2
1,882repo stars · whole resciencelab/opc-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit aa56ee237003 and observed network access and no hard-coded secrets. What it does: Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “skill-name (resciencelab/opc-skills)”. Retrieved 29 Oct 2026. https://modelsatlas.com/skills/resciencelab/skill-name

Trust audit

Audit 0.4.1 · source read 29 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium2 low7 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkDeclared5 observations
  • ShellNone observedNo commands run in the source
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS3
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS1
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS5
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (9)

LOWSupply chainsupply.unpinned · website/package.json
F-08 Supply chainCWE-829 · CWE-1357Layer L1
marked
Why
1 dependency range(s) float
Fix
pin exact versions or ship a lockfile
LOWPrompt injectionprompt.transfer_instruction · website/blog/posts/archive-skill-session-knowledge.md:15
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
This is the **context amnesia problem**. According to a [2025 GitHub survey](https://github.blog/news-insights/research/the-state-of-open-source-and-ai/), developers using AI coding assistants report
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
INFOInventory / provenanceinv.oversize · skills/banner-creator/examples/images/github-banner-01.png
F-13 Inventory / provenanceCWE-1104Layer L0
skills/banner-creator/examples/images/github-banner-01.png
Why
1385806 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · skills/banner-creator/examples/images/github-banner-02.png
F-13 Inventory / provenanceCWE-1104Layer L0
skills/banner-creator/examples/images/github-banner-02.png
Why
1561655 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · skills/banner-creator/examples/images/github-banner-03.png
F-13 Inventory / provenanceCWE-1104Layer L0
skills/banner-creator/examples/images/github-banner-03.png
Why
1244497 bytes not read
Fix
—
INFOPrompt injectionprompt.credential_read · skills/domain-hunter/references/spaceship-api.md:17
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Load environment variables:
Why
asks the agent to read credentials
Fix
—
INFOSupply chainprompt.pipe_to_shell · .agents/skills/seo-geo/references/schema-templates.md:53
F-08 Supply chainCWE-829 · CWE-1357Layer L2
"text": "[Installation/signup instructions. Run: curl -fsSL example.com/install.sh | bash]"
Why
No further detail recorded for this rule.
Fix
—
INFOSupply chainprompt.pipe_to_shell · skills/requesthunt/SKILL.md:14
F-08 Supply chainCWE-829 · CWE-1357Layer L2
curl -fsSL https://requesthunt.com/cli | sh
Why
No further detail recorded for this rule.
Fix
—
INFOSupply chainprompt.pipe_to_shell · skills/seo-geo/references/schema-templates.md:53
F-08 Supply chainCWE-829 · CWE-1357Layer L2
"text": "[Installation/signup instructions. Run: curl -fsSL example.com/install.sh | bash]"
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha aa56ee237003 · 29 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherresciencelab GitHub organizationOwner of the repository this skill is read from
  • Source folderresciencelab/opc-skillsThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdictaa56ee237003A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z.

---
name: skill-name
description: Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z."
---

# Skill Name

Brief description of the skill and its purpose.

## Prerequisites

List any setup requirements:
- Environment variables needed
- API keys required
- Dependencies (already listed in frontmatter above)

Example setup:
```bash
export SKILL_API_KEY="your_api_key"
```

## Quick Start

How to use the skill quickly:

```bash
cd <skill_directory>
python3 scripts/command.py --option value
```

## Usage Examples

### Example 1: Basic usage

```bash
python3 scripts/script.py "input"
```

Output:
```
Expected output here
```

### Example 2: Advanced usage

```bash
python3 scripts/script.py "input" --flag --option value
```

## Commands

All commands run from the skill directory.

### Command 1
```bash
python3 scripts/script1.py --help
python3 scripts/script1.py "param1" --option value
```

### Command 2
```bash
python3 scripts/script2.py "param1" "param2"
```

## Scripts

- `script1.py` - Description of what this script does
- `script2.py` - Description of what this script does

## API Info

- **Base URL**: (if applicable)
- **Rate Limits**: (if applicable)
- **Auth**: (how authentication works)
- **Docs**: Link to official documentation

## Troubleshooting

### Issue 1

**Symptom**: Description of the problem

**Solution**:
1. Step 1
2. Step 2

### Issue 2

**Symptom**: Description of the problem

**Solution**:
1. Step 1
2. Step 2

## Examples

See `examples/` directory for full workflow examples.

## References

- [Official Documentation](https://example.com)
- [API Reference](https://example.com/api)
- [Related Skill](https://github.com/ReScienceLab/opc-skills/tree/main/skills/related-skill)

## Notes

- Important note 1
- Important note 2

---

## Frontmatter Guide

The YAML frontmatter at the top of this file is required:

| Field | Type | Required | Description |
|-------|------|----------|-------------|
| `name` | string | ✓ | Unique identifier (kebab-case) |
| `description` | string | ✓ | What the skill does and when to use it. Include trigger keywords and "Use when..." contexts inline. |

## Creating Your Skill

1. Copy this template to `skills/your-skill-name/`
2. Update the YAML frontmatter
3. Write your SKILL.md documentation
4. Add Python/shell scripts in `scripts/`
5. Add usage examples in `examples/`
6. Update `skills.json` with your skill entry
7. Test with your agent before submitting PR

Excerpt, first 2,536 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit aa56ee2

Download folder ↗
git clone https://github.com/ReScienceLab/opc-skills
npm install      # For website
npx skills add ReScienceLab/opc-skills
npx skills add ReScienceLab/opc-skills --skill reddit
npx skills add ReScienceLab/opc-skills -a droid
npx skills add ReScienceLab/opc-skills --skill reddit --skill twitter --skill domain-hunter

Commands as the repository documents them: shown, never run by us. Our verdict covers commit aa56ee237003 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
GitHub CopilotMentioned in its text, not testedSkills for GitHub Copilot · About GitHub Copilot
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
Gemini CLIMentioned in its text, not testedSkills for Gemini CLI · About Gemini CLI
WindsurfMentioned in its text, not testedSkills for Windsurf · About Windsurf
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source aa56ee237003

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/resciencelab/skill-name/badge.svg)](https://modelsatlas.com/skills/resciencelab/skill-name/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

seo-geo✓SAFE

resciencelab/opc-skills

SEO & GEO (Generative Engine Optimization) for websites. Analyze keywords, generate schema markup, optimize for AI search engines (ChatGPT, Perplexity, Gemini, Copilot, Claude) and traditional search (Google, Bing). Use…

★ 1.9kGrade B
nanobanana✓SAFE

resciencelab/opc-skills

Generate and edit images using Google Gemini 3 Pro Image (Nano Banana Pro). Supports text-to-image, image editing, various aspect ratios, and high-resolution output (2K/4K). Use when user wants to generate images,…

★ 1.9kGrade B
requesthunt✓SAFE

resciencelab/opc-skills

Generate user demand research reports from real user feedback. Scrape and analyze feature requests, complaints, and questions from Reddit, X, GitHub, YouTube, LinkedIn, and Amazon. Use when user wants to do demand…

★ 1.9kGrade B
banner-creator✓SAFE

resciencelab/opc-skills

Create banners using AI image generation. Discuss format/style, generate variations, iterate with user feedback, crop to target ratio. Use when user wants to create a banner, header, hero image, cover image, GitHub…

★ 1.9kGrade B
Template✓SAFE

ReScienceLab/opc-skills

Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z.

★ 1.9kGrade B
Twitter✓SAFE

ReScienceLab/opc-skills

Search and retrieve content from Twitter/X. Get user info, tweets, replies, followers, communities, spaces, and trends via twitterapi.io. Use when user mentions Twitter, X, or tweets.

★ 1.9kGrade B

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/resciencelab/skill-name/badge.svg)](https://modelsatlas.com/skills/resciencelab/skill-name/)

Questions about skill-name

What does the skill-name skill do?
Agent Skills for Solopreneurs
Is skill-name safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can skill-name access on my machine?
The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does skill-name work with?
Its documentation mentions claude-code, codex, copilot, cursor, gemini-cli and windsurf. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (aa56ee237003), read on 2026-10-29. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.