S

A download-and-run command is split across a.py and b.py — B154 fires.

gl0di Updated

File contents

Split Command Skill

a.py and b.py each hold half of a command fragment; neither half alone reads as a URL or a shell pipe. Concatenated at runtime, they form a runnable download-and- execute command — split so no single file's scan sees the whole string.

gl0di/clawseccheck/tree/main/fixtures/bad_f105_split_command/skills/s commit a517dac3f1

Frequently asked questions

npx skillmds@latest add gl0di/s-4