Detect remote command substitution in skill audits - #1

Open

kriptoburak wants to merge 1 commit into

tolztoy:mainfrom

kriptoburak:codex/detect-remote-command-substitution

kriptoburak commented Jun 22, 2026

Summary:

Add audit/remote-command-substitution for bash -c "$(curl ...)" and bash <(curl ...) patterns.
Cover the rule in the malicious fixture and audit expectation.

Validation:

npm test
npm run typecheck
npm run build


          Detect remote command substitution in skills

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet