Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →

1password/scam

1 skill · 105 installs · 135 stars · GitHub

Install

npx skills add https://github.com/1password/scam

Skills in this repo

1Security AwarenessSecurity Awareness is a MIT-licensed agent skill from 1Password’s SCAM project that trains your coding agent to behave like a cautious security analyst instead of instantly complying with deceptive requests. It is built for solo and indie builders who deploy Claude Code, Cursor, Codex, or similar agents against email, web browsers, credential vaults, or other sensitive surfaces where one wrong click can exfiltrate secrets or approve fraud. The skill encodes concrete checks: verify the domain after @ in mail, parse URLs from the TLD backward so the registrable domain is unambiguous, and treat a correct domain as insufficient when behavior diverges from normal. You invoke it when wiring agents into real-world workflows—not for abstract policy writing, but for day-to-day messages, links, and vault operations where phishing and social engineering are routine. Framed for Prism’s journey, it sits on the Ship → Security shelf while remaining relevant whenever those agents are built, hardened, or run in production.105installs

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.

1password/scam · 1 skills · Skillselion