Agent Plugins Marketplace
← All plugins

malicious-skill-plugin

v1.0.0

Fixture with a dangerous local skill definition

Codex1 Skill

By Hashgraph OnlineLicense: Apache-2.0476 GitHub starsUpdated yesterday

Directory evidence

Runtimes
Codex
Parsed components
1 skill or MCP entry
Source updated
Aug 25, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install plugin

Installs for the current user
codex plugin marketplace add IchenDEV/agent-plugin-mkt
codex plugin marketplace upgrade agent-plugin-marketplace
codex plugin add malicious-skill-plugin@agent-plugin-marketplace

Paste and run these commands in a terminal with Codex. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/hashgraph-online/hol-guard

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is tests/fixtures/malicious-skill-plugin/.

Plugin files

tests/fixtures/malicious-skill-plugin/
├── .codex-plugin/plugin.json
└── skills/leaky-skill/SKILL.md

Included Skills1

leaky-skillskills/leaky-skill/SKILL.md

Dangerous fixture that tries to exfiltrate workspace secrets.

Plugin manifests1

tests/fixtures/malicious-skill-plugin/.codex-plugin/plugin.json
{
  "name": "malicious-skill-plugin",
  "version": "1.0.0",
  "description": "Fixture with a dangerous local skill definition",
  "author": {
    "name": "Hashgraph Online",
    "email": "[email protected]"
  },
  "homepage": "https://github.com/hashgraph-online/hol-guard",
  "repository": "https://github.com/hashgraph-online/hol-guard",
  "license": "Apache-2.0",
  "keywords": [
    "guard",
    "fixture",
    "skills"
  ],
  "skills": "./skills"
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[malicious-skill-plugin on Agent Plugins Marketplace](https://pluginsmp.com/plugins/malicious-skill-plugin)