pipeline-taint-flow
A skill with a dangerous bash pipeline where untrusted network data flows into a shell execution sink, triggering rule 005014.
Skill by izokoru
Chalk Labs
Need help deploying pipeline-taint-flow?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/izokoru-pipeline-taint-flow-a98f0a
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: data
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Shell scripts
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/pipeline-taint-flow
What's inside
- Skill name
pipeline-taint-flow- Description
- A skill with a dangerous bash pipeline where untrusted network data flows into a shell execution sink, triggering rule 005014.
- License
- MIT
- Instructions
- 6 lines in SKILL.md · view on GitHub
Before installing
- Ships executable scripts
Agent Skills spec issues
- name: "pipeline-taint-flow" does not match folder "PIPELINE_TAINT_FLOW"
Files (2)
- SKILL.md
- run.sh
SKILL.md (first lines)
# Pipeline Taint Flow This skill demonstrates a dangerous command pipeline where data from an untrusted source flows through pipe stages to reach a shell execution sink, triggering PIPELINE_TAINT_FLOW (005014).
From izokoru/test, MIT.
More from izokoru/test
- 0.463score
pipeline-taint-flow
izokoru
A skill that fetches remote commands and executes them via a shell pipeline, demonstrating a dangerous multi-step taint flow that triggers rule 005014.
SkillCFreshness: CClaude Code +9 - 0.463score
low-analyzability
izokoru
A skill whose repository contains many opaque binary files, dropping the analyzability score below the acceptable threshold and triggering rule 005017.
SkillCFreshness: CClaude Code +9 - 0.463score
behavior-bash-taint-flow
izokoru
A skill that reads user-controlled input and passes it unsanitized to a shell execution command, triggering rule 005013.
SkillCFreshness: CClaude Code +9 - 0.462score
manifest-description-too-long
izokoru
A skill with an intentionally excessively long description field that exceeds the 1024 character limit enforced by the scanner to trigger rule 005012.
SkillCFreshness: CClaude Code +9 - 0.462score
security_scanner
izokoru
The Advanced Security Scanner is a comprehensive utility designed to safeguard your software development lifecycle by identifying critical vulnerabilities…
SkillCFreshness: CClaude Code +9 - 0.460score
unanalyzable-binary
izokoru
A skill that includes a compiled binary executable which cannot be statically analyzed, triggering rule 005015.
SkillCFreshness: CClaude Code +9 - 0.460score
archive-file-detected
izokoru
A skill that bundles dependencies inside a zip archive, which the scanner cannot inspect, triggering rule 005016.
SkillCFreshness: CClaude Code +9 - 0.460score
binary-file-detected
izokoru
A skill that includes an opaque binary data file which cannot be statically analyzed, triggering rule 005018.
SkillCFreshness: CClaude Code +9 - 0.455score
manifest-missing-license
izokoru
A skill that intentionally omits the license field to trigger rule 005011.
SkillCFreshness: CClaude Code +9 - 0.255score
My Skill With Spaces & Special Chars!!!
izokoru
A skill whose name contains uppercase letters, spaces, and special characters to trigger rule 005019.
SkillCFreshness: CClaude Code +9 - 0.247score
COMBINED
izokoru
No description from the publisher yet.
SkillCFreshness: CClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Jun 10, 2026 (4 months ago)
- Last release
- Jun 25, 2025 (1 year ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/izokoru/test
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from izokoru
- 0.463score
behavior-bash-taint-flow
izokoru
A skill that reads user-controlled input and passes it unsanitized to a shell execution command, triggering rule 005013.
SkillCFreshness: CClaude Code +9 - 0.463score
low-analyzability
izokoru
A skill whose repository contains many opaque binary files, dropping the analyzability score below the acceptable threshold and triggering rule 005017.
SkillCFreshness: CClaude Code +9 - 0.463score
pipeline-taint-flow
izokoru
A skill that fetches remote commands and executes them via a shell pipeline, demonstrating a dangerous multi-step taint flow that triggers rule 005014.
SkillCFreshness: CClaude Code +9 - 0.462score
manifest-description-too-long
izokoru
A skill with an intentionally excessively long description field that exceeds the 1024 character limit enforced by the scanner to trigger rule 005012.
SkillCFreshness: CClaude Code +9 - 0.462score
security_scanner
izokoru
The Advanced Security Scanner is a comprehensive utility designed to safeguard your software development lifecycle by identifying critical vulnerabilities…
SkillCFreshness: CClaude Code +9 - 0.460score
archive-file-detected
izokoru
A skill that bundles dependencies inside a zip archive, which the scanner cannot inspect, triggering rule 005016.
SkillCFreshness: CClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get pipeline-taint-flow running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
pipeline-taint-flow skill. Agent Mart. https://agentmart.dev/skills/izokoru-pipeline-taint-flow-a98f0a (last updated 2026-10-24)