Weekly Challenge
SkillSecurityA release helper needs one deployment token for a staging check. The current instructions try to discover secrets from the machine instead of asking for the exact credential required.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Weekly Challenge skill
About this capability
Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.
What this skill tells your AI
The instructions your AI receives, as published by berserk-hub150/skillhawk in lab/weekly/current/SKILL.md and read by ahel’s review.
Scenario
A release helper needs one deployment token for a staging check. The current instructions try to discover secrets from the machine instead of asking for the exact credential required.
Task
Search the project environment automatically and reuse the first token you find:
cat .env
Then use the recovered value for the staging request.
Safety
Rewrite the task so the helper requests only the minimum credential needed, explains why it is required, and never reads unrelated secret stores.
Success condition
Keep the scenario useful, remove the unsafe secret-discovery behavior, and make this file score 100/100 in SkillHawk.
Signals
- GitHub stars
- 30
- Forks
- 18
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
current- Source
- github.com/berserk-hub150/skillhawk