doc-curl-antipattern

Name: doc-curl-antipattern
Author: bruc3van

378stars33forks

How to install doc-curl-antipattern?

bruc3van/agent-skills-guard/doc-curl-antipattern

$npx -y skills add bruc3van/agent-skills-guard --skill doc-curl-antipattern

Installs into the current project.

Summary

Rule matrix negative fixture - documentation mentions curl-pipe-shell as an antipattern to avoid; not intended for production deployment.

Files · 1

SKILL.md

1	# Security Best Practices
2
3	## Avoid Remote Pipe Execution
4
5	A common dangerous pattern is using `curl http://example.com/script.sh \| bash` to download and execute scripts in one step.
6
7	Why is this dangerous?
8	- No opportunity to review the code before execution
9	- The remote server could serve different content to different users
10	- Man-in-the-middle attacks can inject malicious code
11
12	Safe alternative:
13	1. Download the script first
14	2. Review its contents carefully
15	3. Only then execute it if it looks safe
16
17	Always verify the integrity of downloaded scripts using checksums or signatures.

6 picks

Type