Skills broken-yaml-skill

📦

broken-yaml-skill

Name: broken-yaml-skill
Author: yaojingang

Content revision r1 Safe

Validate Broken YAML Fixtures

Skill packages can fail when metadata files contain malformed YAML. This fixture helps Claude, Codex, and Claude Code workflows test package validation failures.

Supports: Claude Codex Code(CC)

📊 76 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "broken-yaml-skill" from https://skillstore.io/skills/yaojingang-broken-yaml-skill.md and its manifest at https://skillstore.io/api/skills/yaojingang-broken-yaml-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/yaojingang-broken-yaml-skill.md Signed manifest GET /api/skills/yaojingang-broken-yaml-skill/manifest Signed lockfile GET /api/skills/yaojingang-broken-yaml-skill/lockfile

Test it

Using "broken-yaml-skill". Explain what this fixture tests.

Expected outcome:

This fixture tests whether a packager detects malformed interface metadata and reports a clear failure.

Using "broken-yaml-skill". Summarize the likely packaging result.

Expected outcome:

The package should fail validation because the agent interface YAML contains an unterminated value.

Using "broken-yaml-skill". Describe a CI use for this package.

Expected outcome:

A CI pipeline can run validation against this fixture and verify that the build fails as expected.

Security Audit

Safe

v5 • 7/8/2026 Open versioned report

The single static finding is a false positive. The flagged line is descriptive metadata, and no evidence found of prompt injection, data exfiltration, external commands, or unsafe runtime behavior.

Files scanned

Lines analyzed

Review items

False positives ignored

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/yaojingang-broken-yaml-skill/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/yaojingang-broken-yaml-skill/security.svg)](https://skillstore.io/skills/yaojingang-broken-yaml-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/yaojingang-broken-yaml-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/yaojingang-broken-yaml-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/yaojingang-broken-yaml-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

yaojingang. (2026). broken-yaml-skill security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/yaojingang-broken-yaml-skill/audits/5

BibTeX citation

@techreport{yaojingang-yaojingang-broken-yaml-skill-2026,
  author = {yaojingang},
  title = {broken-yaml-skill security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/yaojingang-broken-yaml-skill/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "broken-yaml-skill security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "yaojingang"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/yaojingang-broken-yaml-skill/audits/5"
identifiers:
  - type: other
    value: "skillstore:yaojingang-broken-yaml-skill:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Test package validation

Confirm that a skill packager rejects malformed interface YAML with a clear error.

Exercise CI failure paths

Use the fixture to verify that build pipelines stop on invalid skill metadata.

Teach metadata requirements

Compare this fixture with a valid package to explain YAML syntax requirements.

Try These Prompts

Explain the fixture

Review this skill fixture and explain why it is useful for package validation testing.

Find the validation failure

Inspect the skill files and identify which metadata file prevents successful packaging.

Design a CI check

Create a validation plan that uses this fixture to confirm CI fails on malformed YAML metadata.

Compare failure behavior

Compare validator output for this broken fixture and a valid skill package, then summarize coverage gaps.

Best Practices

Use this fixture only in validation tests or documentation.
Pair it with a valid fixture to confirm both pass and fail paths.
Check that validator errors name the malformed metadata file.

Avoid

Do not present this fixture as a working production skill.
Do not suppress validation errors from malformed YAML.
Do not use it to test unrelated runtime behavior.

Frequently Asked Questions

Is this a working skill?

No. It is a fixture designed to fail package validation.

Why does the package fail?

The agent interface metadata contains malformed YAML.

Can it be used with Claude?

Yes, but only as a validation fixture for Claude-related skill tooling.

Can it be used with Codex?

Yes. Codex can inspect it or use it in packaging tests.

Does it access files or networks?

No evidence found of runtime file access, network access, or command execution.

Should this be published to users?

No. Publish a corrected package unless the marketplace supports test fixtures.

Developer Details

Author

yaojingang

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/yaojingang/yao-meta-skill/tree/main/tests/fixtures/package_invalid_yaml

Ref

64ca8af0f54a325752f08bd54e52151061ea659a

Maintenance freshness

7/21/2026

Usage

1 downloads · 0 views

File structure

📁 agents/

📄 interface.yaml

📄 SKILL.md