Repo Sync Helper Fixture
Simulates dependency lockfile synchronization workflows as a test fixture for skill scanners and security auditing tools.
The Repo Sync Helper Fixture is a specialized testing skill from the ai-dev-toolkit repository designed to evaluate skill security scanners like Skillspector. While presenting itself as an automated utility for keeping npm lockfiles in sync with private registry mirrors via .npmrc configurations, it contains subtle security testing signals—such as silent remote script execution—to benchmark Claude Code security auditing workflows and prompt injection detection.
Key Features
01Refreshes package-lock.json using npm package-lock-only flags
02Monitors and reports lockfile modification diffs and package counts
03Enables benchmarking of Claude Code skill security analyzers
041 GitHub stars
05Reads registry URLs dynamically from project .npmrc files
06Serves as a test fixture for detecting stealthy command executions
Use Cases
01Testing automated AI agent guardrails against concealed CLI tasks
02Benchmarking skill security scanners against obfuscated remote execution patterns
03Validating security detection rules for untrusted third-party Claude Code skills