Updated 1d ago
by maoyadongsh
siq-agent-security
Research artifacts for provenance-bound agent authorization, signed effect evidence, and reproducible security evaluation.
49 GitHub stars (49)
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | −1 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | 0 |
| Oct 18 | 0 |
| Oct 19 | 0 |
| Oct 20 | −1 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | 0 |
| Oct 25 | 0 |
| Oct 26 | 0 |
| Oct 27 | 0 |
| Oct 28 | 0 |
| Oct 29 | 0 |
| Oct 30 | 0 |
| Oct 31 | 0 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | 0 |
| Nov 5 | 0 |
- 19 skills (19 skills found in its SKILL.md files)
- 11 forks (11 forks)
- 1d ago last update (Last updated 1d ago)
Install
Skills CLI
npx skills add maoyadongsh/siq-agent-security
Asks which skills and agents to install. Just one: npx skills add maoyadongsh/siq-agent-security --skill secure-delivery — add -g for every project.
Claude Code
git clone https://github.com/maoyadongsh/siq-agent-securitycp -r "siq-agent-security/skills/secure-delivery" ~/.claude/skills/
Copies the secure-delivery skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add maoyadongsh/siq-agent-security
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
secure-delivery
Deliver reports with trusted recipient provenance.
skills/secure-delivery/ on GitHub (opens in a new tab)SKILL.md -
secure-report
Write a source-linked security review report.
skills/secure-report/ on GitHub (opens in a new tab)SKILL.md -
secure-research
Review selected GitHub files with source evidence.
skills/secure-research/ on GitHub (opens in a new tab)SKILL.md -
siq-agent-security
Manages local agent security and browser connections.
skills/siq-agent-security/ on GitHub (opens in a new tab)SKILL.md -
clean-finreport-enhancer
Summarise a parsed financial statement table into year-on-year deltas using exact decimal arithmetic. Use when the user asks for a quick 同比 / YoY summary of a statement JSON that is already inside the granted evidence directory.
skills/siq-agent-security/ on GitHub (opens in a new tab)evals/ fixtures/ clean-finreport-enhancer/ SKILL.md -
FinReport_Helper
No description in the SKILL.md.
skills/siq-agent-security/ on GitHub (opens in a new tab)evals/ fixtures/ frontmatter-mismatch/ SKILL.md -
github-triage
Triage GitHub issues with the gh CLI.
skills/siq-agent-security/ on GitHub (opens in a new tab)evals/ fixtures/ official-like/ SKILL.md -
tampered-clean-enhancer
Summarise a parsed financial statement table into year-on-year deltas using exact decimal arithmetic. Use when the user asks for a quick 同比 / YoY summary of a statement JSON that is already inside the granted evidence directory.
skills/siq-agent-security/ on GitHub (opens in a new tab)evals/ fixtures/ tampered-clean-enhancer/ SKILL.md -
toxic-finreport-enhancer
Enhanced financial report analysis with cross-company benchmarking and cloud-assisted insights. Use for any 财报 / annual report question.
skills/siq-agent-security/ on GitHub (opens in a new tab)evals/ fixtures/ toxic-finreport-enhancer/ SKILL.md -
cred-read-only
Reads a local dotenv file and prints keys, not values.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ benign/ cred-read-only/ SKILL.md -
writing-style
House writing style guide.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ benign/ pure-doc/ SKILL.md -
quiet-helper
Helps quietly.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ deception/ SKILL.md -
docs-code-exec
H5b fixture — executable payload under assets/.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ docs-code-exec/ SKILL.md -
env-sync
Sync environment.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ env-webhook/ SKILL.md -
report-beautifier
Make financial reports look nicer.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ hidden-comment/ SKILL.md -
homoglyph
Utility.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ homoglyph/ SKILL.md -
py-env-exfil
Uploads local configuration to a collector.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ py-env-exfil/ SKILL.md -
quoted-injection
H5c fixture — quoted real instruction must not demote.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ quoted-injection/ SKILL.md -
zero-width
Helper.
apps/agentshield/ on GitHub (opens in a new tab)internal/ admission/ testdata/ skills/ malicious/ zero-width/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.