Workflows
2 recipes, filter by use case, license, or difficulty.
SecurityFreeMachine-verified
Vet the fine print a star count hides: real license and a gate on dual-use tools
Before you build on a starred repo, record its actual license (not an assumed permissive one) and whether it is dual-use, so a custom license or an impersonation risk never surprises you after you have shipped.
MinerU· beginner
SecurityFreeMachine-verified
Vet a SKILL.md before you install it
Treat an agent skill like the untrusted dependency it is: parse its SKILL.md, confirm the frontmatter is well-formed, and surface every executable script it bundles, since the research flagged script-bearing skills as the most dangerous, before you ever let your agent run it.
Agent Skills· beginner