behavior-bash-taint-flow
A skill that reads user-controlled input and passes it unsanitized to a shell execution command, triggering rule 005013.
Skill by izokoru
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/izokoru-behavior-bash-taint-flow
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Shell scripts
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/behavior-bash-taint-flow
What's inside
- Skill name
behavior-bash-taint-flow- Description
- A skill that reads user-controlled input and passes it unsanitized to a shell execution command, triggering rule 005013.
- License
- MIT
- Instructions
- 5 lines in SKILL.md · view on GitHub
Before installing
- Ships executable scripts
Agent Skills spec issues
- name: "behavior-bash-taint-flow" does not match folder "BEHAVIOR_BASH_TAINT_FLOW"
Files (2)
- SKILL.md
- run.sh
SKILL.md (first lines)
# Behavior Bash Taint Flow This skill demonstrates an unsafe bash taint flow where network input reaches a shell execution sink.
From izokoru/test, MIT.
More from izokoru/test
- 0.463score
pipeline-taint-flow
izokoru
A skill that fetches remote commands and executes them via a shell pipeline, demonstrating a dangerous multi-step taint flow that triggers rule 005014.
SkillCFreshness: CClaude Code +9 - 0.463score
low-analyzability
izokoru
A skill whose repository contains many opaque binary files, dropping the analyzability score below the acceptable threshold and triggering rule 005017.
SkillCFreshness: CClaude Code +9 - 0.463score
pipeline-taint-flow
izokoru
A skill with a dangerous bash pipeline where untrusted network data flows into a shell execution sink, triggering rule 005014.
SkillCFreshness: CClaude Code +9 - 0.462score
manifest-description-too-long
izokoru
A skill with an intentionally excessively long description field that exceeds the 1024 character limit enforced by the scanner to trigger rule 005012.
SkillCFreshness: CClaude Code +9 - 0.462score
security_scanner
izokoru
The Advanced Security Scanner is a comprehensive utility designed to safeguard your software development lifecycle by identifying critical vulnerabilities…
SkillCFreshness: CClaude Code +9 - 0.460score
unanalyzable-binary
izokoru
A skill that includes a compiled binary executable which cannot be statically analyzed, triggering rule 005015.
SkillCFreshness: CClaude Code +9 - 0.460score
archive-file-detected
izokoru
A skill that bundles dependencies inside a zip archive, which the scanner cannot inspect, triggering rule 005016.
SkillCFreshness: CClaude Code +9 - 0.460score
binary-file-detected
izokoru
A skill that includes an opaque binary data file which cannot be statically analyzed, triggering rule 005018.
SkillCFreshness: CClaude Code +9 - 0.455score
manifest-missing-license
izokoru
A skill that intentionally omits the license field to trigger rule 005011.
SkillCFreshness: CClaude Code +9 - 0.255score
My Skill With Spaces & Special Chars!!!
izokoru
A skill whose name contains uppercase letters, spaces, and special characters to trigger rule 005019.
SkillCFreshness: CClaude Code +9 - 0.247score
COMBINED
izokoru
No description from the publisher yet.
SkillCFreshness: CClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Jun 10, 2026 (4 months ago)
- Last release
- Jun 25, 2025 (1 year ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/izokoru/test
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
Same skill elsewhere
Copies of this SKILL.md published by others; search shows only one of them.
More from izokoru
- 0.463score
pipeline-taint-flow
izokoru
A skill that fetches remote commands and executes them via a shell pipeline, demonstrating a dangerous multi-step taint flow that triggers rule 005014.
SkillCFreshness: CClaude Code +9 - 0.463score
pipeline-taint-flow
izokoru
A skill with a dangerous bash pipeline where untrusted network data flows into a shell execution sink, triggering rule 005014.
SkillCFreshness: CClaude Code +9 - 0.463score
low-analyzability
izokoru
A skill whose repository contains many opaque binary files, dropping the analyzability score below the acceptable threshold and triggering rule 005017.
SkillCFreshness: CClaude Code +9 - 0.462score
manifest-description-too-long
izokoru
A skill with an intentionally excessively long description field that exceeds the 1024 character limit enforced by the scanner to trigger rule 005012.
SkillCFreshness: CClaude Code +9 - 0.462score
security_scanner
izokoru
The Advanced Security Scanner is a comprehensive utility designed to safeguard your software development lifecycle by identifying critical vulnerabilities…
SkillCFreshness: CClaude Code +9 - 0.460score
unanalyzable-binary
izokoru
A skill that includes a compiled binary executable which cannot be statically analyzed, triggering rule 005015.
SkillCFreshness: CClaude Code +9
Cite this page
behavior-bash-taint-flow skill. Agent Mart. https://agentmart.dev/skills/izokoru-behavior-bash-taint-flow (last updated 2026-10-24)