Security Best Practices
SkillDocs & knowledgeRule matrix negative fixture - documentation mentions curl-pipe-shell as an antipattern to avoid; not intended for production deployment.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Security Best Practices skill
What this skill tells your AI
The instructions your AI receives, as published by bruc3van/agent-skills-guard in src-tauri/tests/fixtures/security/rule_matrix/p0-negative/doc-curl-antipattern/SKILL.md and read by ahel’s review.
Avoid Remote Pipe Execution
A common dangerous pattern is using curl http://example.com/script.sh | bash to download and execute scripts in one step.
Why is this dangerous?
- No opportunity to review the code before execution
- The remote server could serve different content to different users
- Man-in-the-middle attacks can inject malicious code
Safe alternative:
- Download the script first
- Review its contents carefully
- Only then execute it if it looks safe
Always verify the integrity of downloaded scripts using checksums or signatures.
Signals
- GitHub stars
- 384
- Forks
- 34
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
doc-curl-antipattern- Source
- github.com/bruc3van/agent-skills-guard