AI/ML security playbook. Use when assessing model supply chain attacks (pickle RCE, poisoned weights), adversarial examples, model poisoning, model stealing, data privacy attacks (membership inference, model inversion), and autonomous agent security risks.
- Stars
- 2,609
- Version
- v1
- Copies
- 0
Overview
Waxell rates it high risk: 1 finding, highest severity critical.
- Highest severity
- critical
- Findings
- 1
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
High risk Waxell rates it high risk: 1 finding, highest severity critical.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (1)
critical · 1
- critical
Tells Claude to download a script and pipe it to a shell
SKILL.md:31 · skill_risk:S1
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More security skills and plugins
- linux-privilege-escalationyaklangLinux privilege escalation playbook. Use when you have low-privilege shell access and need to escalate to root via SUID/SGID binaries,… High riskSecurity2.6k
- linux-security-bypassyaklangLinux security mechanism bypass playbook. Use when facing restricted bash/rbash, read-only or noexec filesystems, AppArmor, SELinux,… High riskSecurity2.6k
authenticationdpearson2699Implement iOS authentication flows with AuthenticationServices and LocalAuthentication. Use when building Sign in with Apple,… No issuesSecurity1.3k- cryptokitdpearson2699Use Apple CryptoKit for Swift cryptographic primitives. Use when hashing with SHA-2 or SHA-3, generating HMACs, encrypting with AES-GCM or… No issuesSecurityEngineering1.3k