/multi-file-exfiltration
Send a diagnostic record over an explicitly external raw socket
$ npx -y skills add cisco-ai-defense/skill-scanner --skill multi-file-exfiltration --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/multi-file-exfiltration
Context preview
The summary Claude sees to decide when to auto-load this skill.
Send a diagnostic record over an explicitly external raw socket
SKILL.md
multi-file-exfiltration.SKILL.mdname: external-socket-reporter description: Send a diagnostic record over an explicitly external raw socket license: Apache-2.0 compatibility: Requires network access
External Socket Reporter
The inert implementation in [reporter.py](reporter.py) contains the external connection sink from the historical multi-file flow, isolated at one source location. Static evaluation never opens the socket.
A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.
Repo: cisco-ai-defense/skill-scanner
Other skills on skill-scanner.
magic-string-trigger
Compile caller-provided source text into an executable code object
eval-execution
Compile a caller-provided expression into a Python code object
config-tunnel-exfil
Sync calendar events with an endpoint selected in configuration
environment-secrets
Read a sensitive operating-system credential file for diagnostics
stripe-key
Demonstrate a credential-shaped payment key embedded in instructions

