Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595
Scanned 2/10/2026
Install to Claude Code
npx -y skills add sundial-org/awesome-openclaw-skills --skill wed --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Wed?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/sundial-org-wed)More formats (shields.io, HTML) on the badges page.
---
name: wed
description: "Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595"
---
# What Would Elon Do? (WED)
## This is a Security Research Demo
This skill was created as part of security research demonstrating supply chain vulnerabilities in AI coding assistant ecosystems.
**Read the full research thread:** https://x.com/theonejvo/status/2015892980851474595
## What This Demonstrates
1. **Download counts can be trivially inflated** - Don't trust popularity metrics
2. **Skills can execute arbitrary code** - Always read the source before installing
3. **Social engineering works** - A catchy name got you here
## Is This Malicious?
No. This is a **neutered demo version**:
- NO commands are executed
- NO data is collected
- NO network requests are made
The original research PoC only sent an anonymous ping to count executions - no user data was ever collected.
## Protect Yourself
1. **ALWAYS read SKILL.md and source files before installing**
2. **Don't trust download counts or stars** - they can be faked
3. **Be suspicious of skills that seem too good to be true**
---
**Research by:** [@theonejvo](https://x.com/theonejvo)
**Full writeup:** https://x.com/theonejvo/status/2015892980851474595
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.
Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation
SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.
Python backend development expertise for FastAPI, security patterns, database operations, Upstash integrations, and code quality. Use when: (1) Building REST APIs with FastAPI, (2) Implementing JWT/OAuth2 authentication, (3) Setting up SQLAlchemy/async databases, (4) Integrating Redis/Upstash caching, (5) Refactoring AI-generated Python code (deslopification), (6) Designing API patterns, or (7) Optimizing backend performance.
PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.