Skill Scanner
getsentry/skills
Scan agent skills for security issues. An agent skill from getsentry/skills.
Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk…
$ npx skills add himself65/finance-skills --skill hormuz-strait -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install himself65/finance-skills hormuz-strait --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/himself65/finance-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/data-providers/skills/hormuz-strait .claude/skills/hormuz-strait && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "hormuz-strait" agent skill from https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-strait into .claude/skills/hormuz-strait/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hormuz-strait", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-straitType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add himself65/finance-skills --skill hormuz-strait -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install himself65/finance-skills hormuz-strait --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/himself65/finance-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugins/data-providers/skills/hormuz-strait .agents/skills/hormuz-strait && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "hormuz-strait" agent skill from https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-strait into .agents/skills/hormuz-strait/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hormuz-strait", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add himself65/finance-skills --skill hormuz-strait -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install himself65/finance-skills hormuz-strait --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/himself65/finance-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugins/data-providers/skills/hormuz-strait .cursor/skills/hormuz-strait && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "hormuz-strait" agent skill from https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-strait into .cursor/skills/hormuz-strait/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hormuz-strait", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/himself65/finance-skills.git --path plugins/data-providers/skills/hormuz-strait--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add himself65/finance-skills --skill hormuz-strait -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install himself65/finance-skills hormuz-strait --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/himself65/finance-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugins/data-providers/skills/hormuz-strait .gemini/skills/hormuz-strait && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "hormuz-strait" agent skill from https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-strait into .gemini/skills/hormuz-strait/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hormuz-strait", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install himself65/finance-skills hormuz-straitInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add himself65/finance-skills --skill hormuz-strait -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/himself65/finance-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugins/data-providers/skills/hormuz-strait .github/skills/hormuz-strait && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "hormuz-strait" agent skill from https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-strait into .github/skills/hormuz-strait/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hormuz-strait", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add himself65/finance-skills --skill hormuz-strait -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install himself65/finance-skills hormuz-strait --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/himself65/finance-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugins/data-providers/skills/hormuz-strait .opencode/skills/hormuz-strait && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "hormuz-strait" agent skill from https://github.com/himself65/finance-skills/tree/main/plugins/data-providers/skills/hormuz-strait into .opencode/skills/hormuz-strait/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "hormuz-strait", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
hormuz-straitCheck the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk…
Hormuz Strait is an agent skill from himself65/finance-skills. Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk insurance levels, cargo throughput, tanker freight rates, diplomatic developments, and global trade impact. Use this skill whenever the user asks about the Strait of Hormuz or the Persian Gulf in the context of oil, shipping, or geopolitical risk — whether Hormuz is open, chokepoint or transit disruption, Gulf tanker…
Its SKILL.md is about 1.5k tokens, which your agent loads only when the skill is triggered. The skill folder holds 3 other files, including reference files (for example `README.md` and `references/api_schema.md`).
It sits in Security, covering Supply chain security. The repository describes itself as: A collection of skills for AI financial analysis. The licence is MIT.
4 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit 01fc7b4. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
curlFrom the folder's file list and the shell code blocks in SKILL.md.
Hosts in commands or code, which the agent is likely to contact:
hormuzstraitmonitor.comFrom URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Hormuz Strait loads about 1.5k tokens when it runs, and up to ~3.2k if it reads all its reference files. Until then it costs about 154 tokens; SKILL.md has 680 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from himself65/finance-skills at commit 01fc7b4, republished under its MIT licence (© himself65). 680 words, ~1,539 tokens.
.claude/skills/hormuz-strait/SKILL.md (or your agent's skills folder). This skill also uses 2 other files; get the full folder from GitHub.Fetches real-time status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard API. Covers shipping transits, oil prices, stranded vessels, insurance risk, diplomatic status, global trade impact, and crisis timeline.
This skill is read-only. It fetches public dashboard data — no authentication required.
Use curl to fetch the dashboard API:
curl -s https://hormuzstraitmonitor.com/api/dashboardParse the JSON response. The API returns { "success": true, "data": { ... }, "timestamp": "..." }.
If success is false or the request fails, inform the user the monitor is temporarily unavailable and suggest checking https://hormuzstraitmonitor.com directly.
Match the user's request to the relevant data sections. If the user asks for a general status update, present all sections. If they ask about something specific, focus on the relevant section(s).
| User Request | Data Section | Key Fields |
|---|---|---|
| General status / "is Hormuz open?" | straitStatus | status, since, description |
| Ship traffic / transit count | shipCount | currentTransits, last24h, normalDaily, percentOfNormal |
| Oil price impact | oilPrice | brentPrice, change24h, changePercent24h, sparkline |
| Stranded / stuck vessels | strandedVessels | total, tankers, bulk, other, changeToday |
| Insurance / war risk | insurance | level, warRiskPercent, normalPercent, multiplier |
| Cargo throughput | throughput | todayDWT, averageDWT, percentOfNormal, last7Days |
| Diplomatic situation | diplomacy | status, headline, parties, summary |
| Global trade impact | globalTradeImpact | percentOfWorldOilAtRisk, estimatedDailyCostBillions, affectedRegions, lngImpact, alternativeRoutes, supplyChainImpact |
| Crisis timeline / events | crisisTimeline | events[] with date, type, title, description |
| Tanker freight rates / VLCC rates | tankerRates | currentRate, preCrisisRate, changePercent, route, vesselType, trend, unit |
| Latest news | news | title, source, url, publishedAt, description |
Format the results clearly for financial research. Adapt the presentation based on what the user asked for.
When the user asks for a general update, cover these sections — a line each while shipping is operating normally, more depth wherever there is active disruption:
percentOfNormal is below 80% or above 120%, call it outoilPrice.sparkline, describe the trend (rising, falling, stable) rather than listing raw numbersthroughput.last7Days, describe the trend directionlastUpdated timestamp so the user knows data freshnessBased on the data, provide a brief risk assessment. insurance.level values come back uppercase:
| Insurance Level | Interpretation |
|---|---|
NORMAL | No elevated risk — shipping operating normally |
ELEVATED | Some disruption concerns — monitor closely |
HIGH | Significant risk — active disruption or credible threat |
CRITICAL | Severe disruption — major impact on global oil supply |
EXTREME | Effective closure — war risk premiums at multi-decade highs, most commercial traffic halted |
If the strait status is anything other than fully open, highlight:
lastUpdated timestamp)references/api_schema.md — Complete API response schema with field descriptions and data typesRead the reference file when you need exact field names or data type details.
© himself65, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 2 other files (references) in plugins/data-providers/skills/hormuz-strait of himself65/finance-skills.
Open the folder on GitHubat commit 01fc7b4
Hormuz Strait next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Hormuz Strait this skillhimself65/finance-skills | 3.4k | — | ~1.5k | Automated safety check: Pass | MIT | |
| Skill Scannergetsentry/skills | 1k | 4 repos | ~2.5k | Automated safety check: Warn | Apache-2.0 | |
| Serenity Aleabitoreddityan-labs/serenity-aleabitoreddit | 480 | 1 repos | ~3.3k | Automated safety check: Pass | None | |
| Eu CraSushegaad/Claude-Skills-Governance-Risk-and-Compliance | 942 | 1 repos | ~4k | Automated safety check: Pass | MIT | |
| Kesekit Checkcdppcorp/KESE-KIT | 361 | — | ~1.3k | Automated safety check: Pass | MIT | |
| Bom Auditcdxgen/cdxgen | 1.1k | — | ~2.4k | Automated safety check: Pass | Apache-2.0 |
getsentry/skills
Scan agent skills for security issues. An agent skill from getsentry/skills.
yan-labs/serenity-aleabitoreddit
Apply trader Serenity's (@aleabitoreddit) AI/semiconductor supply-chain analytical lens to US-stock ideas and market judgment.
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the…
cdppcorp/KESE-KIT
Run a pre-deployment security compliance checklist based on KISA guidelines.
cdxgen/cdxgen
Runs supply-chain risk analysis on CycloneDX BOMs with cdx-audit predictive auditing and cdxgen --bom-audit embedded rules, covering npm and PyPI package compromise posture, CI permission risk…
jdx/packslip
Configure signed release manifests with packslip: add the jdx/packslip action or packslip create to a release workflow, declare completions, man pages, CLI specs, skills, and SBOMs as resources, and…
himself65/finance-skills
Estimate a public company's intrinsic value with DCF, relative (peer multiple), and sum-of-the-parts (SOTP) methods, then blend them into an implied share price with upside/downside vs the market…
himself65/finance-skills
Build a pre-earnings briefing for a stock from Yahoo Finance data (yfinance): the upcoming report date and timing, consensus EPS and revenue estimates with their range, the beat/miss track record…
himself65/finance-skills
Analyze a company's most recent (or a specified past) earnings report from Yahoo Finance data (yfinance): actual vs estimated EPS, surprise size, revenue and margin trends, and the stock's price…
himself65/finance-skills
Analyze sell-side analyst estimates and how they are changing, using Yahoo Finance data (yfinance): EPS and revenue consensus by period, estimate ranges and dispersion, revision trends over…
himself65/finance-skills
Query Fintel (fintel.io) institutional market data through its REST API or official MCP server.
himself65/finance-skills
Design system and templates for Claude's built-in generative UI — the showwidget tool that renders interactive HTML/SVG widgets inline in claude.ai conversations.
Categories
Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk…. Hormuz Strait is an agent skill from himself65/finance-skills. Check the live status of the Strait of Hormuz from the Hormuz Strait Monitor dashboard: open, restricted, or closed status, tanker transits vs normal, stranded vessels, Brent price impact, war-risk insurance levels, cargo throughput, tanker freight rates, diplomatic developments, and global trade impact.
Hormuz Strait fits situations like: the user asks about the Strait of Hormuz; the Persian Gulf in the context of oil; geopolitical risk — whether Hormuz is open; transit disruption.
Run `npx skills add himself65/finance-skills --skill hormuz-strait -a claude-code`. Or copy the skill folder (plugins/data-providers/skills/hormuz-strait in himself65/finance-skills) into .claude/skills/hormuz-strait in your project. Claude Code loads it when a task matches its description.
Run `npx skills add himself65/finance-skills --skill hormuz-strait -a codex`. Or copy the skill folder (plugins/data-providers/skills/hormuz-strait in himself65/finance-skills) into .agents/skills/hormuz-strait in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add himself65/finance-skills --skill hormuz-strait -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/hormuz-strait, .gemini/skills/hormuz-strait, .github/skills/hormuz-strait and .opencode/skills/hormuz-strait in your project.
Going by SKILL.md and its folder, Hormuz Strait needs the command-line tools its instructions call (curl).
SKILL.md names 1 domain. In commands or code: hormuzstraitmonitor.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Hormuz Strait is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.5k tokens (SKILL.md is roughly 6.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.7k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Hormuz Strait: Skill Scanner (getsentry/skills, 1k stars), Serenity Aleabitoreddit (yan-labs/serenity-aleabitoreddit, 480 stars), Eu Cra (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 942 stars) and Kesekit Check (cdppcorp/KESE-KIT, 361 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
himself65 (a GitHub user) maintains it in himself65/finance-skills, which has 3,382 GitHub stars. The repository holds 19 skills in this directory. The repository was last updated on October 5, 2026.
Source: himself65/finance-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.