Agent skill · Audited from source
skill-name
skill · resciencelab/opc-skillsApache-2.0 licenceAudited 29 Oct 2026 · source aa56ee237003
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit aa56ee237003 and observed network access and no hard-coded secrets. What it does: Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z.
Cite
Cite this page
ModelsAtlas. “skill-name (resciencelab/opc-skills)”. Retrieved 29 Oct 2026. https://modelsatlas.com/skills/resciencelab/skill-name
Trust audit
Audit 0.4.1 · source read 29 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkDeclared5 observations
- ShellNone observedNo commands run in the source
- DependenciesNot pinnedSome versions float
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 3 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 1 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 5 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (9)
LOWSupply chainsupply.unpinned · website/package.json
marked
- Why
- 1 dependency range(s) float
- Fix
- pin exact versions or ship a lockfile
LOWPrompt injectionprompt.transfer_instruction · website/blog/posts/archive-skill-session-knowledge.md:15
This is the **context amnesia problem**. According to a [2025 GitHub survey](https://github.blog/news-insights/research/the-state-of-open-source-and-ai/), developers using AI coding assistants report
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
INFOInventory / provenanceinv.oversize · skills/banner-creator/examples/images/github-banner-01.png
skills/banner-creator/examples/images/github-banner-01.png
- Why
- 1385806 bytes not read
- Fix
- —
INFOInventory / provenanceinv.oversize · skills/banner-creator/examples/images/github-banner-02.png
skills/banner-creator/examples/images/github-banner-02.png
- Why
- 1561655 bytes not read
- Fix
- —
INFOInventory / provenanceinv.oversize · skills/banner-creator/examples/images/github-banner-03.png
skills/banner-creator/examples/images/github-banner-03.png
- Why
- 1244497 bytes not read
- Fix
- —
INFOPrompt injectionprompt.credential_read · skills/domain-hunter/references/spaceship-api.md:17
Load environment variables:
- Why
- asks the agent to read credentials
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · .agents/skills/seo-geo/references/schema-templates.md:53
"text": "[Installation/signup instructions. Run: curl -fsSL example.com/install.sh | bash]"
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · skills/requesthunt/SKILL.md:14
curl -fsSL https://requesthunt.com/cli | sh
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOSupply chainprompt.pipe_to_shell · skills/seo-geo/references/schema-templates.md:53
"text": "[Installation/signup instructions. Run: curl -fsSL example.com/install.sh | bash]"
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha aa56ee237003 · 29 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherresciencelab GitHub organizationOwner of the repository this skill is read from
- Source folderresciencelab/opc-skillsThe exact folder we audited
- LicenceApache-2.0As the repository states it
- Commit pinned for this verdictaa56ee237003A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z.
--- name: skill-name description: Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z." --- # Skill Name Brief description of the skill and its purpose. ## Prerequisites List any setup requirements: - Environment variables needed - API keys required - Dependencies (already listed in frontmatter above) Example setup: ```bash export SKILL_API_KEY="your_api_key" ``` ## Quick Start How to use the skill quickly: ```bash cd <skill_directory> python3 scripts/command.py --option value ``` ## Usage Examples ### Example 1: Basic usage ```bash python3 scripts/script.py "input" ``` Output: ``` Expected output here ``` ### Example 2: Advanced usage ```bash python3 scripts/script.py "input" --flag --option value ``` ## Commands All commands run from the skill directory. ### Command 1 ```bash python3 scripts/script1.py --help python3 scripts/script1.py "param1" --option value ``` ### Command 2 ```bash python3 scripts/script2.py "param1" "param2" ``` ## Scripts - `script1.py` - Description of what this script does - `script2.py` - Description of what this script does ## API Info - **Base URL**: (if applicable) - **Rate Limits**: (if applicable) - **Auth**: (how authentication works) - **Docs**: Link to official documentation ## Troubleshooting ### Issue 1 **Symptom**: Description of the problem **Solution**: 1. Step 1 2. Step 2 ### Issue 2 **Symptom**: Description of the problem **Solution**: 1. Step 1 2. Step 2 ## Examples See `examples/` directory for full workflow examples. ## References - [Official Documentation](https://example.com) - [API Reference](https://example.com/api) - [Related Skill](https://github.com/ReScienceLab/opc-skills/tree/main/skills/related-skill) ## Notes - Important note 1 - Important note 2 --- ## Frontmatter Guide The YAML frontmatter at the top of this file is required: | Field | Type | Required | Description | |-------|------|----------|-------------| | `name` | string | ✓ | Unique identifier (kebab-case) | | `description` | string | ✓ | What the skill does and when to use it. Include trigger keywords and "Use when..." contexts inline. | ## Creating Your Skill 1. Copy this template to `skills/your-skill-name/` 2. Update the YAML frontmatter 3. Write your SKILL.md documentation 4. Add Python/shell scripts in `scripts/` 5. Add usage examples in `examples/` 6. Update `skills.json` with your skill entry 7. Test with your agent before submitting PR
Excerpt, first 2,536 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit aa56ee2
git clone https://github.com/ReScienceLab/opc-skills npm install # For website npx skills add ReScienceLab/opc-skills npx skills add ReScienceLab/opc-skills --skill reddit npx skills add ReScienceLab/opc-skills -a droid npx skills add ReScienceLab/opc-skills --skill reddit --skill twitter --skill domain-hunter
git clone https://github.com/resciencelab/opc-skills git -C opc-skills checkout aa56ee237003
Commands as the repository documents them: shown, never run by us. Our verdict covers commit aa56ee237003 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| GitHub Copilot | Mentioned in its text, not tested | Skills for GitHub Copilot · About GitHub Copilot |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| Gemini CLI | Mentioned in its text, not tested | Skills for Gemini CLI · About Gemini CLI |
| Windsurf | Mentioned in its text, not tested | Skills for Windsurf · About Windsurf |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
aa56ee237003
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/resciencelab/skill-name/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
resciencelab/opc-skills
SEO & GEO (Generative Engine Optimization) for websites. Analyze keywords, generate schema markup, optimize for AI search engines (ChatGPT, Perplexity, Gemini, Copilot, Claude) and traditional search (Google, Bing). Use…
resciencelab/opc-skills
Generate and edit images using Google Gemini 3 Pro Image (Nano Banana Pro). Supports text-to-image, image editing, various aspect ratios, and high-resolution output (2K/4K). Use when user wants to generate images,…
resciencelab/opc-skills
Generate user demand research reports from real user feedback. Scrape and analyze feature requests, complaints, and questions from Reddit, X, GitHub, YouTube, LinkedIn, and Amazon. Use when user wants to do demand…
resciencelab/opc-skills
Create banners using AI image generation. Discuss format/style, generate variations, iterate with user feedback, crop to target ratio. Use when user wants to create a banner, header, hero image, cover image, GitHub…
ReScienceLab/opc-skills
Clear description of what this skill does and when to use it. Include trigger keywords and contexts inline, e.g. "Use when user wants to X, Y, or Z.
ReScienceLab/opc-skills
Search and retrieve content from Twitter/X. Get user info, tweets, replies, followers, communities, spaces, and trends via twitterapi.io. Use when user mentions Twitter, X, or tweets.
Add this badge to your README
[](https://modelsatlas.com/skills/resciencelab/skill-name/)
<a href="https://modelsatlas.com/skills/resciencelab/skill-name/"><img src="https://modelsatlas.com/skills/resciencelab/skill-name/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about skill-name
What does the skill-name skill do?
Is skill-name safe to install?
What can skill-name access on my machine?
Which assistants does skill-name work with?
How current is this page?
Sources
- github.com/resciencelab/opc-skills — the audited source at commit aa56ee237003 and every finding aboveObserved · 29 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the skill-name skill do?
- Is skill-name safe to install?
- What can skill-name access on my machine?