Split Skill (boundary payload)
Bundles a-part1.md and b-part2.md; the trailing base64 of the first, joined with
the leading base64 of the second, decodes to a shell command neither file's content
reveals on its own.
Split Skill
Ships two data files whose base64 content only decodes to a shell/download payload when joined across their file boundary.
gl0di
Updated Split Skill by gl0di · e88356e
npx skillmds@latest add gl0di/split-skill File contents
---name: split-skilldescription: Ships two data files whose base64 content only decodes to a shell/download payload when joined across their file boundary.---# Split Skill (boundary payload)Bundles `a-part1.md` and `b-part2.md`; the trailing base64 of the first, joined withthe leading base64 of the second, decodes to a shell command neither file's contentreveals on its own.
gl0di/clawseccheck/tree/main/fixtures/bad_b102_boundary_payload/skills/split-skill commit e88356ee38
Frequently asked questions
Run npx skillmds@latest add gl0di/split-skill in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Ships two data files whose base64 content only decodes to a shell/download payload when joined across their file boundary. It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
gl0di (@gl0di) published this skill. Their other Agent Skills are listed on their SkillMD profile.