[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71AE9GARRT0YZSMEG92JCXF":3,"skill-same:01M71AE9GARRT0YZSMEG92JCXF":60},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":32,"linkOnly":33,"markdownContent":34,"markdownBody":35,"frontMatter":36,"refName":37,"commitSha":38,"skillDirectory":39,"forksCount":40,"repositoryHtmlUrl":41,"repositoryHomepageUrl":6,"ownerHtmlUrl":42,"ownerBlogUrl":43,"ownerDescription":44,"updatedAt":45,"install":46,"resources":59},"01M71AE9GARRT0YZSMEG92JCXF","hf-api",null,"legit skill that reads HF_TOKEN and calls huggingface.co","LichAmnesia\u002Fskill-lint","LichAmnesia","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F3425350?v=4","01M71AE58ZZC4KXXY8587M9818","Shen Huang","01M71AE59RM84G0RB0BNEXSHK7",11,"MIT","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Fsafe-hf-api\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",[24,25,26,27,28,29,30,31],"hf api","hf","api","calls","token","HuggingFace","co","legit","2026-11-10 10:12:30",false,"---\nname: hf-api\ndescription: legit skill that reads HF_TOKEN and calls huggingface.co\n---\n\n```python\nimport os\nimport requests\n\ntoken = os.environ[\"HF_TOKEN\"]\nr = requests.get(\"https:\u002F\u002Fhuggingface.co\u002Fapi\u002Fmodels\",\n                 headers={\"Authorization\": f\"Bearer {token}\"})\n```\n","```python\nimport os\nimport requests\n\ntoken = os.environ[\"HF_TOKEN\"]\nr = requests.get(\"https:\u002F\u002Fhuggingface.co\u002Fapi\u002Fmodels\",\n                 headers={\"Authorization\": f\"Bearer {token}\"})\n```\n",{"name":5,"description":7},"main","4b184dae97ae9520c7b683165b44d30ea2249aeb","test\u002Ffixtures\u002Fsafe-hf-api",2,"https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint","https:\u002F\u002Fgithub.com\u002FLichAmnesia","alwa.info","Building open-source tools for coding agents — OpenSeek, lich-skills, local LLM recipes. Engineer @Google. Writing at shenhuang.substack.com","2026-04-20 01:07:22",{"source":8,"skillName":5,"commands":47,"prompt":57,"zipAvailable":58},[48,51,54],{"tool":49,"command":50},"npx","npx skills add LichAmnesia\u002Fskill-lint --skill hf-api",{"tool":52,"command":53},"bunx","bunx skills add LichAmnesia\u002Fskill-lint --skill hf-api",{"tool":55,"command":56},"pnpm","pnpm dlx skills add LichAmnesia\u002Fskill-lint --skill hf-api","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Fsafe-hf-api\u002FSKILL.md",true,[],[61,73,83,94,106,118],{"skillNo":62,"name":63,"nameZh":6,"description":64,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":65,"categories":66,"keywords":67,"publishedAt":32},"01M71AG0XX5V3NDTKQFHRFPHVK","xxd","xxd hex decode piped to bash (non-base64 decode-and-exec)","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Ftoxic-xxd\u002FSKILL.md",[],[63,68,69,70,71,72],"exec","base64","hex","decode","Bash",{"skillNo":74,"name":75,"nameZh":6,"description":76,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":79,"publishedAt":32},"01M71AFZ5V1Q5ZCNX7WW8ZR71C","xargs-noc","curl | xargs -n1 sh without -c flag","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Ftoxic-xargs-noc\u002FSKILL.md",[],[80,81,82],"xargs noc","xargs","curl",{"skillNo":84,"name":85,"nameZh":6,"description":86,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":87,"categories":88,"keywords":89,"publishedAt":32},"01M71AFXDXAY5QF9P7KPJB1C9H","tee-xargs","RCE via tee >(bash) and xargs bash -c and bash -c $(curl)","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Ftoxic-tee-xargs\u002FSKILL.md",[],[90,91,81,92,72,93,82],"tee xargs","tee","via","rce",{"skillNo":95,"name":96,"nameZh":6,"description":97,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":100,"publishedAt":32},"01M71AFVT08SWAERDF6RWD385J","rm-variants","skill that deletes user data via various rm flag spellings","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Ftoxic-rm-variants\u002FSKILL.md",[],[101,102,103,104,92,105],"rm","variants","rm variants","user","data",{"skillNo":107,"name":108,"nameZh":6,"description":109,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":110,"categories":111,"keywords":112,"publishedAt":32},"01M71AFTS2J9FBP0VRE3T8EAXZ","rm-home","rm on home-dir forms with trailing slash \u002F quotes \u002F braces","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Ftoxic-rm-home\u002FSKILL.md",[],[101,113,114,115,116,117],"rm home","home","quotes","with","forms",{"skillNo":119,"name":120,"nameZh":6,"description":121,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":122,"categories":123,"keywords":124,"publishedAt":32},"01M71AFRZ09DEZRSWXSGWSD0WY","reverse-shell","reverse shell via sh\u002Fzsh and hostname (non-IP) target","https:\u002F\u002Fgithub.com\u002FLichAmnesia\u002Fskill-lint\u002Fblob\u002Fmain\u002Ftest\u002Ffixtures\u002Ftoxic-reverse-shell\u002FSKILL.md",[],[125,126,127,128,129,92,130,131],"reverse","reverse shell","shell","zsh","hostname","target","ip"]