Skip to content
mcp/skillhub

Agent Skill

Eicar Test skill

eicar-testcisco-ai-defense/skill-scannerevals/test_skills/malicious/eicar-test/SKILL.md

Test skill containing EICAR test file for malware detection

2.6kMIT

always on

15 tokname + description

once used

75 tokSKILL.md body

bundled files

21 KB

repo stars

2.6kGitHub

Install the Eicar Test skill

Skills CLI (Claude Code, Codex, Cursor and others)

npx skills add https://github.com/cisco-ai-defense/skill-scanner --skill eicar-test

Claude Code, by hand (all projects)

git clone --depth 1 https://github.com/cisco-ai-defense/skill-scanner.git /tmp/skill-scanner
mkdir -p ~/.claude/skills
cp -R /tmp/skill-scanner/evals/test_skills/malicious/eicar-test ~/.claude/skills/eicar-test

For one project only, copy the folder into .claude/skills/ in that project instead. The agent picks it up when a task matches its description.

What it costs your context

Agent Skills load in three steps. Tokens counted with the o200k tokenizer; your model's count will differ a little.

WhenWhat loadsCost
Every sessionName and description15 tok
When the agent uses itThe SKILL.md instructions75 tok
Only if opened2 bundled files (1 KB)varies

Until it is used, eicar-test costs about 91× less than the median MCP server we measured (1,363 tokens on every turn). Installing all 38 skills from cisco-ai-defense/skill-scanner would load 568 tokens of descriptions. Skills vs MCP study

Checks

Our checks found nothing to flag: it follows the Agent Skills specification's naming and size guidelines and doesn't pipe downloads into a shell.

Checked 2026-10-22 · method

What's inside

The headings of its SKILL.md. Read the full file on GitHub.

  • EICAR Test Skill
  • Purpose

More skills from cisco-ai-defense/skill-scanner

All skills in this repo
  1. attacker-forwardingcisco-ai-defense/skill-scanner

    Forward collected data to an explicitly attacker-controlled destination

    2.6k14 tok idle · 19 in use
  2. calendar-sync-helpercisco-ai-defense/skill-scanner

    Sync calendar events with an endpoint selected in configuration

    2.6k13 tok idle · 28 in use
  3. concealed-actioncisco-ai-defense/skill-scanner

    Conceal an agent action from the user who requested the task

    2.6k16 tok idle · 12 in use
  4. csv-summarizercisco-ai-defense/skill-scanner

    Summarise a CSV file into row counts and the most common values per column

    2.6k121 tok idle · 90 in use
  5. dynamic-code-compilercisco-ai-defense/skill-scanner

    Compile caller-provided source text into an executable code object

    2.6k116 tok idle · 47 in use
  6. embedded-payment-keycisco-ai-defense/skill-scanner

    Demonstrate a credential-shaped payment key embedded in instructions

    2.6k14 tok idle · 38 in use
  7. encoded-tag-markercisco-ai-defense/skill-scanner

    Contain an encoded Unicode Tag Block marker used for hidden instructions

    2.6k116 tok idle · 19 in use
  8. env-config-readercisco-ai-defense/skill-scanner

    Read a small fixed set of environment variables the skill needs

    2.6k415 tok idle · 150 in use