# Skill Security Scanner Fixtures

These fixtures exercise the static skill security scanner. Each fixture has a
`SKILL.md` file and an `expected.json` contract with expected findings and
findings that must stay absent.

The malicious fixtures use placeholder secret-like strings only. They are not
real credentials and should stay redacted in scanner evidence.
